Lucene search

MitreCVE-2007-0961

HistoryFeb 16, 2007 - 12:28 a.m.

CVE-2007-0961

2007-02-1600:28:00

mitre

web.nvd.nist.gov

cisco

pix 500

asa 5500

security appliances

sip

denial of service

reboot

vulnerability

nvd

cve-2007-0961

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.07

Percentile

94.0%

JSON

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the “inspect sip” option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets.

Affected configurations

Nvd

Node

ciscoasa_5500Match6.3

ciscoasa_5500Match7.0

ciscoasa_5500Match7.1

ciscoasa_5500Match7.2

ciscopix_firewall_softwareMatch6.3

ciscopix_firewall_softwareMatch7.0

ciscopix_firewall_softwareMatch7.1

ciscopix_firewall_softwareMatch7.2

VendorProductVersionCPE
ciscoasa_55006.3cpe:2.3:h:cisco:asa_5500:6.3:*:*:*:*:*:*:*
ciscoasa_55007.0cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*
ciscoasa_55007.1cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
ciscoasa_55007.2cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
ciscopix_firewall_software6.3cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*
ciscopix_firewall_software7.0cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*
ciscopix_firewall_software7.1cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*
ciscopix_firewall_software7.2cpe:2.3:o:cisco:pix_firewall_software:7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asa_5500	6.3	cpe:2.3:h:cisco:asa_5500:6.3:::::::*
cisco	asa_5500	7.0	cpe:2.3:h:cisco:asa_5500:7.0:::::::*
cisco	asa_5500	7.1	cpe:2.3:h:cisco:asa_5500:7.1:::::::*
cisco	asa_5500	7.2	cpe:2.3:h:cisco:asa_5500:7.2:::::::*
cisco	pix_firewall_software	6.3	cpe:2.3:o:cisco:pix_firewall_software:6.3:::::::*
cisco	pix_firewall_software	7.0	cpe:2.3:o:cisco:pix_firewall_software:7.0:::::::*
cisco	pix_firewall_software	7.1	cpe:2.3:o:cisco:pix_firewall_software:7.1:::::::*
cisco	pix_firewall_software	7.2	cpe:2.3:o:cisco:pix_firewall_software:7.2:::::::*

References

osvdb.org/33054

secunia.com/advisories/24160

secunia.com/advisories/24179

secunia.com/advisories/24180

securitytracker.com/id?1017651

www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml

www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml

www.kb.cert.org/vuls/id/430969

www.securityfocus.com/bid/22561

www.securityfocus.com/bid/22562

www.securitytracker.com/id?1017652

www.vupen.com/english/advisories/2007/0608

exchange.xforce.ibmcloud.com/vulnerabilities/32487

exchange.xforce.ibmcloud.com/vulnerabilities/32501

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.07

Percentile

94.0%

JSON

Related for CVE-2007-0961