Cisco PIX/ASA拒绝服务，ACL绕过及验证绕过漏洞

安全公告 月度Top10安全漏洞 每日漏洞播报 Cisco PIX/ASA拒绝服务，ACL绕过及验证绕过漏洞 发布时间：2009-04-09 录入：启明星辰 BUGTRAQ ID: 34429 CVE ID：CVE-2009-1155 CVE-2009-1156 CVE-2009-1157 CVE-2009-1158 CVE-2009-1159 CVE-2009-1160 CNCVE ID：CNCVE-20091155 CNCVE-20091156 CNCVE-20091157 CNCVE-20091158 CNCVE-20091159 CNCVE-20091160 Cisco...

CVE-2009-1155

Cisco ASA 5500 Series and Cisco PIX Security Appliances are affected by CVE-2009-1155. When the override-account-disable feature is enabled in tunnel-group general-attributes, remote attackers can bypass authentication and establish a VPN session to the ASA/PIX via unspecified vectors. Affected s...