CVE-2009-1155
published 2009-04-09CVE-2009-1155: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1…
PriorityP341high7.8CVSS 2.0
AVNACLAuNCCINAN
EPSS
1.88%
77.1th percentile
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | asa_adaptive_security_appliance_and_cisco_pix_security_appliances | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco·2009-04-08·CVSS 7.8
CVE-2009-1155 [HIGH] CWE-264 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines the details of these vulnerabilities:
VPN Authentication Bypass when Account Override Feature is Used
vulnerability
Crafted HTTP packet denial of service (DoS) vulnerability
Crafted TCP Packet DoS vulnerability
Crafted H.323 packet DoS vulnerability
SQL*Net packet DoS vulnerability
Access control list (ACL) bypass vulnerability
Workarounds are available for some of the vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco
CVE-2009-1155 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
CVE-2009-1155: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines the
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsx47543, CSCsv52239, CSCsy22484, CSCsx32675, CSCsw51809
GHSA
GHSA-r97x-ww76-jhf3: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
ghsa_unreviewed·2022-05-02
CVE-2009-1155 [HIGH] CWE-287 GHSA-r97x-ww76-jhf3: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/53441http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022016http://www.vupen.com/english/advisories/2009/0981http://osvdb.org/53441http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022016http://www.vupen.com/english/advisories/2009/0981
2009-04-09
Published