CVE-2009-1158
published 2009-04-09CVE-2009-1158: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.92%
77.6th percentile
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | asa_adaptive_security_appliance_and_cisco_pix_security_appliances | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco·2009-04-08·CVSS 7.8
CVE-2009-1155 [HIGH] CWE-264 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines the details of these vulnerabilities:
VPN Authentication Bypass when Account Override Feature is Used
vulnerability
Crafted HTTP packet denial of service (DoS) vulnerability
Crafted TCP Packet DoS vulnerability
Crafted H.323 packet DoS vulnerability
SQL*Net packet DoS vulnerability
Access control list (ACL) bypass vulnerability
Workarounds are available for some of the vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco
CVE-2009-1158 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
CVE-2009-1158: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines the
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsx47543, CSCsv52239, CSCsy22484, CSCsx32675, CSCsw51809
GHSA
GHSA-884r-w4rr-hvg2: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7
ghsa_unreviewed·2022-05-02
CVE-2009-1158 [HIGH] GHSA-884r-w4rr-hvg2: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.
No detection rules found.
No public exploits indexed.
http://osvdb.org/53444http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022015http://www.vupen.com/english/advisories/2009/0981http://osvdb.org/53444http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022015http://www.vupen.com/english/advisories/2009/0981
2009-04-09
Published