CVE-2007-0962

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml	Patch Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml	Patch Vendor Advisory
http://www.securityfocus.com/bid/22562
http://securitytracker.com/id?1017651	Patch
http://secunia.com/advisories/24160	Vendor Advisory
http://secunia.com/advisories/24180	Patch Vendor Advisory
http://www.securityfocus.com/bid/22561
http://www.securitytracker.com/id?1017652
http://osvdb.org/33055
http://www.vupen.com/english/advisories/2007/0608
https://exchange.xforce.ibmcloud.com/vulnerabilities/32486

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:cisco:firewall_services_module:2.3:::::::*
	cpe:2.3:h:cisco:firewall_services_module:3.1:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:cisco:pix_firewall_software:7.1:::::::*
	cpe:2.3:h:cisco:asa_5500:7.0:::::::*
	cpe:2.3:h:cisco:asa_5500:7.1:::::::*
	cpe:2.3:o:cisco:pix_firewall_software:7.0:::::::*

Information

Published : 2007-02-15 16:28

Updated : 2018-10-30 09:25

NVD link : CVE-2007-0962

Mitre link : CVE-2007-0962

JSON object : View

CWE

NVD-CWE-Other

Products Affected

cisco

pix_firewall_software
asa_5500
firewall_services_module

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml", "name": "20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances", "tags": ["Patch", "Vendor Advisory"], "refsource": "CISCO"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml", "name": "20070214 Multiple Vulnerabilities in Firewall Services Module", "tags": ["Patch", "Vendor Advisory"], "refsource": "CISCO"}, {"url": "http://www.securityfocus.com/bid/22562", "name": "22562", "tags": [], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1017651", "name": "1017651", "tags": ["Patch"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/24160", "name": "24160", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/24180", "name": "24180", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/22561", "name": "22561", "tags": [], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1017652", "name": "1017652", "tags": [], "refsource": "SECTRACK"}, {"url": "http://osvdb.org/33055", "name": "33055", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2007/0608", "name": "ADV-2007-0608", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32486", "name": "cisco-pix-asa-http-dos(32486)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-0962", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-02-16T00:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-30T16:25Z"}

7.8 /10