ID CVE-2007-0962
Summary Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 30-10-2018 - 16:25)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid
  • 22561
  • 22562
cisco
  • 20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances
  • 20070214 Multiple Vulnerabilities in Firewall Services Module
osvdb 33055
sectrack
  • 1017651
  • 1017652
secunia
  • 24160
  • 24180
vupen ADV-2007-0608
xf cisco-pix-asa-http-dos(32486)
Last major update 30-10-2018 - 16:25
Published 16-02-2007 - 00:28
Last modified 30-10-2018 - 16:25
Back to Top