medium4.3
CVE-2014-0739
Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db au…
Impact
Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and provide certain pass-through services to untrusted devices via a crafted configuration-file TFTP request, aka Bug ID CSCuj66766.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Adaptive Security Appliance Software | Version 9.1\(3\) |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0739
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32955
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0739
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32955