Multiple Cisco Products TACACS+ Authentication Bypass Vulnerability
BID:49956
Info
Multiple Cisco Products TACACS+ Authentication Bypass Vulnerability
| Bugtraq ID: | 49956 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-3298 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 05 2011 12:00AM |
| Updated: | Oct 05 2011 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Firewall Services Module (FWSM) 4.1(5) Cisco Firewall Services Module (FWSM) 4.1(1.2) Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 4.0(15) Cisco Firewall Services Module (FWSM) 4.0(11.1) Cisco Firewall Services Module (FWSM) 4.0(10.1) Cisco Firewall Services Module (FWSM) 4.0 (8) Cisco Firewall Services Module (FWSM) 4.0 (6) Cisco Firewall Services Module (FWSM) 4.0 Cisco Firewall Services Module (FWSM) 3.2(20) Cisco Firewall Services Module (FWSM) 3.2(2) Cisco Firewall Services Module (FWSM) 3.2(17.2) Cisco Firewall Services Module (FWSM) 3.2(16.1) Cisco Firewall Services Module (FWSM) 3.2(13) Cisco Firewall Services Module (FWSM) 3.2 (2) Cisco Firewall Services Module (FWSM) 3.2 Cisco Firewall Services Module (FWSM) 3.1(20) Cisco Firewall Services Module (FWSM) 3.1(17.2) Cisco Firewall Services Module (FWSM) 3.1(16) Cisco Firewall Services Module (FWSM) 3.1(1.9) Cisco Firewall Services Module (FWSM) 3.1(1.7) Cisco Firewall Services Module (FWSM) 3.1 (3.3) Cisco Firewall Services Module (FWSM) 3.1 (3.2) Cisco Firewall Services Module (FWSM) 3.1 (3.18) Cisco Firewall Services Module (FWSM) 3.1 (3.11) Cisco Firewall Services Module (FWSM) 3.1 (3.1) Cisco Firewall Services Module (FWSM) 3.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.5 Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(4.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(4) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(3) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.49) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.47) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.46) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.45) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2 Cisco ASA 5500 Series Adaptive Security Appliance 7.1 Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.12) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.11) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.10) Cisco ASA 5500 Series Adaptive Security Appliance 7.0 |
| Not Vulnerable: |
Cisco Firewall Services Module (FWSM) 4.1(7) Cisco Firewall Services Module (FWSM) 4.0(16) Cisco Firewall Services Module (FWSM) 3.2(22) Cisco Firewall Services Module (FWSM) 3.1(21) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.18) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(5) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.50) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.24) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.4) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.3) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.13) |
Discussion
Multiple Cisco Products TACACS+ Authentication Bypass Vulnerability
Cisco ASA 5500 Series Adaptive Security Appliances, the FWSM for Cisco Catalyst 6500 Series Switches, and Cisco 7600 Series Routers are prone to a remote authentication-bypass vulnerability.
Successful exploits allow remote attackers to bypass authentication and gain administrative access to vulnerable devices.
This issue is being tracked by Cisco bug IDs CSCto74274 and CSCto40365.
Cisco ASA 5500 Series Adaptive Security Appliances, the FWSM for Cisco Catalyst 6500 Series Switches, and Cisco 7600 Series Routers are prone to a remote authentication-bypass vulnerability.
Successful exploits allow remote attackers to bypass authentication and gain administrative access to vulnerable devices.
This issue is being tracked by Cisco bug IDs CSCto74274 and CSCto40365.
Exploit / POC
Multiple Cisco Products TACACS+ Authentication Bypass Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
References
Multiple Cisco Products TACACS+ Authentication Bypass Vulnerability
References:
References: