Cisco ASA 5500 NTLM Protocol Authentication Bypass Vulnerability

Bugtraq ID:	38276
Class:	Access Validation Error
CVE:	CVE-2010-0568
Remote:	Yes
Local:	No
Published:	Feb 17 2010 12:00AM
Updated:	Feb 17 2010 05:42PM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 7.0.4 .3 Cisco ASA 5500 Series Adaptive Security Appliance 7.0.4 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2 Cisco ASA 5500 Series Adaptive Security Appliance 7.1 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.0
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.10)

Cisco ASA 5500 NTLM Protocol Authentication Bypass Vulnerability

Cisco ASA 5500 series appliances are prone to a remote authentication-bypass vulnerability.

Successful exploits allow remote attackers to gain access to vulnerable devices, without requiring successful authentication.

This issue is being tracked by Cisco bug ID CSCte21953.

Cisco ASA 5500 NTLM Protocol Authentication Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco ASA 5500 NTLM Protocol Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory along with fixes. Please see the referenced advisory for details.

Cisco ASA 5500 NTLM Protocol Authentication Bypass Vulnerability

References:

• Cisco ASA 5500 Series Adaptive Security Appliances Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security (Cisco)