Cisco Adaptive Security Appliance (ASA) Software Arbitrary File Overwrite Vulnerability

Bugtraq ID:	70251
Class:	Input Validation Error
CVE:	CVE-2014-3399
Remote:	Yes
Local:	No
Published:	Oct 06 2014 12:00AM
Updated:	Oct 07 2014 06:00AM
Credit:	Alec Stuart-Muirk
Vulnerable:
Not Vulnerable:

Cisco Adaptive Security Appliance (ASA) Software Arbitrary File Overwrite Vulnerability

Cisco Adaptive Security Appliance (ASA) Software is prone to a vulnerability that may allow attackers to overwrite arbitrary local files.

Successful exploits may allow an attacker to overwrite arbitrary files on the RAMFS cache or inject Lua scripts, causing a denial of service condition.

This issue is being tracked by Cisco Bug ID CSCup54208.

Cisco Adaptive Security Appliance (ASA) Software Arbitrary File Overwrite Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Adaptive Security Appliance (ASA) Software Arbitrary File Overwrite Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Adaptive Security Appliance (ASA) Software Arbitrary File Overwrite Vulnerability

References:

• Cisco Adaptive Security Appliance Homepage (Cisco)