Lucene search

PRIOn knowledge basePRION:CVE-2009-1160

HistoryApr 09, 2009 - 3:08 p.m.

Code injection

2009-04-0915:08:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

71.7%

JSON

Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.

CPENameOperatorVersion
adaptive_security_appliance_5500eq8.1
adaptive_security_appliance_5500eq7.0
adaptive_security_appliance_5500eq7.1
adaptive_security_appliance_5500eq7.2
adaptive_security_appliance_5500eq8.0
pixeq7.0
pixeq8.0
pixeq7.2
pixeq7.1

Name	Operator	Version
adaptive_security_appliance_5500	eq	8.1
adaptive_security_appliance_5500	eq	7.0
adaptive_security_appliance_5500	eq	7.1
adaptive_security_appliance_5500	eq	7.2
adaptive_security_appliance_5500	eq	8.0
pix	eq	7.0
pix	eq	8.0
pix	eq	7.2
pix	eq	7.1

References

secunia.com/advisories/34607

www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

www.securityfocus.com/bid/34429

www.securitytracker.com/id?1022017

www.vupen.com/english/advisories/2009/0981

7.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

71.7%

JSON

Related for PRION:CVE-2009-1160