The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.
References
Link | Resource |
---|---|
http://tools.cisco.com/security/center/viewAlert.x?alertId=31692 | Vendor Advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6682 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-11-13 07:55
Updated : 2013-11-14 11:25
NVD link : CVE-2013-6682
Mitre link : CVE-2013-6682
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
cisco
- adaptive_security_appliance_software