high7.8
CVE-2009-1155
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 bef…
Impact
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Adaptive Security Appliance 5500 | Versions 7.1, 7.2, 8.0, 8.1 |
| Cisco | Pix | Versions 7.1, 7.2, 8.0, 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/53441
- http://secunia.com/advisories/34607
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml
- http://www.securityfocus.com/bid/34429
- http://www.securitytracker.com/id?1022016
- http://www.vupen.com/english/advisories/2009/0981
- http://osvdb.org/53441
- http://secunia.com/advisories/34607
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml
- http://www.securityfocus.com/bid/34429
- http://www.securitytracker.com/id?1022016
- http://www.vupen.com/english/advisories/2009/0981