ID CVE-2010-0567
Summary Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.1), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.15); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (active IPsec tunnel loss and prevention of new tunnels) via a malformed IKE message through an existing tunnel to UDP port 4500, aka Bug ID CSCtc47782.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 17-08-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 38279
cisco 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
osvdb 62436
sectrack 1023612
secunia
  • 38618
  • 38636
vupen ADV-2010-0415
xf cisco-asa-ike-dos(56341)
Last major update 17-08-2017 - 01:32
Published 19-02-2010 - 17:30
Last modified 17-08-2017 - 01:32
Back to Top