CVE-2007-2463
published 2007-05-02CVE-2007-2463: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a…
PriorityP433high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.88%
85.3th percentile
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via unknown vectors related to VPN connection termination and password expiry.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | <= 7.2.2 | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | pix | <= 7.2 | — |
| cisco | pix | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco8.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
LDAP and VPN Vulnerabilities in PIX and ASA Appliances
vendor_cisco·2007-05-02·CVSS 8.0
CVE-2007-2462 [HIGH] CWE-287 LDAP and VPN Vulnerabilities in PIX and ASA Appliances
LDAP and VPN Vulnerabilities in PIX and ASA Appliances
Multiple vulnerabilities exist in the Cisco Adaptive Security Appliance
(ASA) and PIX security appliances. These vulnerabilities include two
Lightweight Directory Access Protocol (LDAP) authentication bypass
vulnerabilities and two denial of service (DoS) vulnerabilities.
The Lightweight Directory Access Protocol (LDAP) authentication bypass
vulnerabilities are caused by a specific processing path followed when the
device is setup to use a Lightweight Directory Access Protocol (LDAP)
authentication server. These vulnerabilities may allow unauthenticated users to
access either the internal network or the device itself.
The two DoS vulnerabilities may be triggered when devices are
terminating Virtual Private Networks (VPN). These deni
Cisco
LDAP and VPN Vulnerabilities in PIX and ASA Appliances
vendor_cisco
CVE-2007-2463 LDAP and VPN Vulnerabilities in PIX and ASA Appliances
CVE-2007-2463: LDAP and VPN Vulnerabilities in PIX and ASA Appliances
Multiple vulnerabilities exist in the Cisco Adaptive Security Appliance (ASA) and PIX security appliances. These vulnerabilities include two Lightweight Directory Access Protocol (LDAP) authentication bypass vulnerabilities and two denial of service (DoS) vulnerabilities. The Lightweight Directory Access Protocol (LDAP) authentication bypass vulnerabilities are caused by a specific processing path followed when the device is setup to use a Lightweight Directory Access Protocol (LDAP) authentication server. These vulnerabilities may allow unauthenticated users to access either the internal network or the device itself. The two DoS vulnerabilities may be triggered when devices are terminating Virtual Private Networks (VPN)
GHSA
GHSA-rwh9-qmwh-9j93: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7
ghsa_unreviewed·2022-05-01
CVE-2007-2463 [HIGH] GHSA-rwh9-qmwh-9j93: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via unknown vectors related to VPN connection termination and password expiry.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/25109http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtmlhttp://www.osvdb.org/35332http://www.securityfocus.com/bid/23768http://www.vupen.com/english/advisories/2007/1636https://exchange.xforce.ibmcloud.com/vulnerabilities/34021http://secunia.com/advisories/25109http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtmlhttp://www.osvdb.org/35332http://www.securityfocus.com/bid/23768http://www.vupen.com/english/advisories/2007/1636https://exchange.xforce.ibmcloud.com/vulnerabilities/34021
2007-05-02
Published