CVE-2007-2464

EPSS 2.33%
Veröffentlicht 02.05.2007 22:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Pix Version <= 7.2

Cisco ≫ Pix Version7.1

Cisco ≫ Adaptive Security Appliance Software Version <= 7.2.2

Cisco ≫ Adaptive Security Appliance Software Version7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.33%	0.833

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

http://secunia.com/advisories/25109

http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml

Patch

Vendor Advisory

http://www.securityfocus.com/bid/23768

http://www.vupen.com/english/advisories/2007/1636

http://www.kb.cert.org/vuls/id/337508

US Government Resource

http://www.osvdb.org/35333

https://exchange.xforce.ibmcloud.com/vulnerabilities/34023

https://nvd.nist.gov/vuln/detail/CVE-2007-2464

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2464

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2464

EUVD