medium6.4
CVE-2013-6682
The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which all…
Impact
The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Adaptive Security Appliance Software | through 9.0.3\(6\) Versions 7.0, 7.0\(0\), 7.0\(1\), 7.0\(2\), 7.0\(4\) |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6682
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31692
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6682
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31692