[email protected]CVE-2009-1155

HistoryApr 09, 2009 - 3:08 p.m.

CVE-2009-1155

2009-04-0915:08:00

CWE-287

[email protected]

web.nvd.nist.gov

cisco

asa

pix

security

appliances

authentication bypass

vulnerability

cve-2009-1155

nvd

7 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.005 Low

EPSS

Percentile

75.6%

JSON

Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.

CPENameOperatorVersion
cisco:pixcisco pixeq8.1
cisco:adaptive_security_appliance_5500cisco adaptive security appliance 5500eq8.1
cisco:pixcisco pixeq8.0
cisco:adaptive_security_appliance_5500cisco adaptive security appliance 5500eq7.1
cisco:adaptive_security_appliance_5500cisco adaptive security appliance 5500eq7.2
cisco:adaptive_security_appliance_5500cisco adaptive security appliance 5500eq8.0
cisco:pixcisco pixeq7.2
cisco:pixcisco pixeq7.1

CPE	Name	Operator	Version
cisco:pix	cisco pix	eq	8.1
cisco:adaptive_security_appliance_5500	cisco adaptive security appliance 5500	eq	8.1
cisco:pix	cisco pix	eq	8.0
cisco:adaptive_security_appliance_5500	cisco adaptive security appliance 5500	eq	7.1
cisco:adaptive_security_appliance_5500	cisco adaptive security appliance 5500	eq	7.2
cisco:adaptive_security_appliance_5500	cisco adaptive security appliance 5500	eq	8.0
cisco:pix	cisco pix	eq	7.2
cisco:pix	cisco pix	eq	7.1

References

osvdb.org/53441

secunia.com/advisories/34607

www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

www.securityfocus.com/bid/34429

www.securitytracker.com/id?1022016

www.vupen.com/english/advisories/2009/0981

7 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.005 Low

EPSS

Percentile

75.6%

JSON

Related for CVE-2009-1155

prion1 securityvulns2 seebug1 cisco1