ID |
CVE-2007-0962
|
Summary |
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic. |
References |
|
Vulnerable Configurations |
-
cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*
-
cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*
-
cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*
-
cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
-
cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*
-
cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*
|
CVSS |
Base: | 7.8 (as of 30-10-2018 - 16:25) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
NONE |
NONE |
COMPLETE |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
refmap
via4
|
bid | | cisco | - 20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances
- 20070214 Multiple Vulnerabilities in Firewall Services Module
| osvdb | 33055 | sectrack | | secunia | | vupen | ADV-2007-0608 | xf | cisco-pix-asa-http-dos(32486) |
|
Last major update |
30-10-2018 - 16:25 |
Published |
16-02-2007 - 00:28 |
Last modified |
30-10-2018 - 16:25 |