CVE-2007-0962
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
92.1%
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when “inspect http” is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | firewall_services_module | 2.3 | cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:* |
| cisco | firewall_services_module | 3.1 | cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:* |
| cisco | asa_5500 | 7.0 | cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:* |
| cisco | asa_5500 | 7.1 | cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:* |
| cisco | pix_firewall_software | 7.0 | cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:* |
| cisco | pix_firewall_software | 7.1 | cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:* |
References
osvdb.org/33055
secunia.com/advisories/24160
secunia.com/advisories/24180
securitytracker.com/id?1017651
www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml
www.securityfocus.com/bid/22561
www.securityfocus.com/bid/22562
www.securitytracker.com/id?1017652
www.vupen.com/english/advisories/2007/0608
exchange.xforce.ibmcloud.com/vulnerabilities/32486
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
92.1%