CVE-2009-1159
published 2009-04-09CVE-2009-1159: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1…
PriorityP335high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.92%
77.5th percentile
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows remote attackers to cause a denial of service (traceback and device reload) via a series of SQL*Net packets.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | asa_adaptive_security_appliance_and_cisco_pix_security_appliances | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco·2009-04-08·CVSS 7.8
CVE-2009-1155 [HIGH] CWE-264 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines the details of these vulnerabilities:
VPN Authentication Bypass when Account Override Feature is Used
vulnerability
Crafted HTTP packet denial of service (DoS) vulnerability
Crafted TCP Packet DoS vulnerability
Crafted H.323 packet DoS vulnerability
SQL*Net packet DoS vulnerability
Access control list (ACL) bypass vulnerability
Workarounds are available for some of the vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco
CVE-2009-1159 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
CVE-2009-1159: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines the
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsx47543, CSCsv52239, CSCsy22484, CSCsx32675, CSCsw51809
GHSA
GHSA-7hgf-pcvc-hj4r: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
ghsa_unreviewed·2022-05-02
CVE-2009-1159 [HIGH] GHSA-7hgf-pcvc-hj4r: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows remote attackers to cause a denial of service (traceback and device reload) via a series of SQL*Net packets.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/53446http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022015http://www.vupen.com/english/advisories/2009/0981http://osvdb.org/53446http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022015http://www.vupen.com/english/advisories/2009/0981
2009-04-09
Published