CVE-2009-1160
published 2009-04-09CVE-2009-1160: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.14%
63.0th percentile
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | asa_adaptive_security_appliance_and_cisco_pix_security_appliances | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco·2009-04-08·CVSS 7.8
CVE-2009-1155 [HIGH] CWE-264 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines the details of these vulnerabilities:
VPN Authentication Bypass when Account Override Feature is Used
vulnerability
Crafted HTTP packet denial of service (DoS) vulnerability
Crafted TCP Packet DoS vulnerability
Crafted H.323 packet DoS vulnerability
SQL*Net packet DoS vulnerability
Access control list (ACL) bypass vulnerability
Workarounds are available for some of the vulnerabilities.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa.
Cisco
Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
vendor_cisco
CVE-2009-1160 Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
CVE-2009-1160: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines the
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsx47543, CSCsv52239, CSCsy22484, CSCsx32675, CSCsw51809
GHSA
GHSA-rrxx-7pc4-7jx7: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
ghsa_unreviewed·2022-05-02
CVE-2009-1160 [MEDIUM] GHSA-rrxx-7pc4-7jx7: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022017http://www.vupen.com/english/advisories/2009/0981http://secunia.com/advisories/34607http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtmlhttp://www.securityfocus.com/bid/34429http://www.securitytracker.com/id?1022017http://www.vupen.com/english/advisories/2009/0981
2009-04-09
Published