CVE-2007-2464 Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (d...
HighCVSS 7.1
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco pix | <= 7.2 | No fix listed |
| cisco pix | = 7.1 | No fix listed |
| cisco adaptive security appliance software | <= 7.2.2 | No fix listed |
| cisco adaptive security appliance software | = 7.1 | No fix listed |
References
- 25109 third-party-advisory
- 20070502 LDAP and VPN Vulnerabilities in PIX and ASA Appliances patch vendor-advisory
- VU#337508 third-party-advisory us-government-resource
- 35333 vdb-entry
- 23768 vdb-entry
- ADV-2007-1636 vdb-entry
- cisco-asa-ssl-vpn-dos(34023) vdb-entry