cvelistv5 - cve-2007-0961

CVE-2007-0961 (GCVE-0-2007-0961)

Vulnerability from cvelistv5

Published

2007-02-16 00:00

Modified

2024-08-07 12:34

Severity ?

CWE

Summary

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets.

References

URL

Tags

	http://www.vupen.com/english/advisories/2007/0608	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/24180	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/33054	vdb-entry, x_refsource_OSVDB
	https://exchange.xforce.ibmcloud.com/vulnerabilities/32501	vdb-entry, x_refsource_XF
	http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml	vendor-advisory, x_refsource_CISCO
	http://www.kb.cert.org/vuls/id/430969	third-party-advisory, x_refsource_CERT-VN
	http://securitytracker.com/id?1017651	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/24179	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/22561	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/32487	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/22562	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/24160	third-party-advisory, x_refsource_SECUNIA
	http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml	vendor-advisory, x_refsource_CISCO
	http://www.securitytracker.com/id?1017652	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:34:21.377Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2007-0608",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0608"
          },
          {
            "name": "24180",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24180"
          },
          {
            "name": "33054",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/33054"
          },
          {
            "name": "cisco-fwsm-sip-dos(32501)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32501"
          },
          {
            "name": "20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"
          },
          {
            "name": "VU#430969",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/430969"
          },
          {
            "name": "1017651",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017651"
          },
          {
            "name": "24179",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24179"
          },
          {
            "name": "22561",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22561"
          },
          {
            "name": "cisco-pix-asa-sip-dos(32487)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32487"
          },
          {
            "name": "22562",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22562"
          },
          {
            "name": "24160",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24160"
          },
          {
            "name": "20070214 Multiple Vulnerabilities in Firewall Services Module",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"
          },
          {
            "name": "1017652",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017652"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the \"inspect sip\" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2007-0608",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0608"
        },
        {
          "name": "24180",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24180"
        },
        {
          "name": "33054",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/33054"
        },
        {
          "name": "cisco-fwsm-sip-dos(32501)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32501"
        },
        {
          "name": "20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"
        },
        {
          "name": "VU#430969",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/430969"
        },
        {
          "name": "1017651",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017651"
        },
        {
          "name": "24179",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24179"
        },
        {
          "name": "22561",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22561"
        },
        {
          "name": "cisco-pix-asa-sip-dos(32487)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32487"
        },
        {
          "name": "22562",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22562"
        },
        {
          "name": "24160",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24160"
        },
        {
          "name": "20070214 Multiple Vulnerabilities in Firewall Services Module",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"
        },
        {
          "name": "1017652",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017652"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the \"inspect sip\" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2007-0608",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0608"
            },
            {
              "name": "24180",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24180"
            },
            {
              "name": "33054",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/33054"
            },
            {
              "name": "cisco-fwsm-sip-dos(32501)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32501"
            },
            {
              "name": "20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"
            },
            {
              "name": "VU#430969",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/430969"
            },
            {
              "name": "1017651",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017651"
            },
            {
              "name": "24179",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24179"
            },
            {
              "name": "22561",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22561"
            },
            {
              "name": "cisco-pix-asa-sip-dos(32487)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32487"
            },
            {
              "name": "22562",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22562"
            },
            {
              "name": "24160",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24160"
            },
            {
              "name": "20070214 Multiple Vulnerabilities in Firewall Services Module",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"
            },
            {
              "name": "1017652",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017652"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0961",
    "datePublished": "2007-02-16T00:00:00.000Z",
    "dateReserved": "2007-02-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:34:21.377Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2007-AVI-090

Vulnerability from certfr_avis

Plusieurs vulnérabilités sur les produits Cisco PIX, ASA et FWSM permettent de réaliser un déni de service à distance, de contourner la politique de sécurité ou d'élever ses privilèges.

Description

Plusieurs vulnérabilités affectent les produits Cisco précités :

une erreur dans la méthode d'authentification LOCAL de PIX 6.x permet à un utilisateur authentifié malveillant disposant des privilèges minimaux (level 0) d'obtenir les privilèges maximaux (level 15) ;
une erreur dans la gestion des listes de contrôle d'accès (ACL) par FWSM permet à un utilisateur malveillant de ne pas faire évaluer des règles de contrôle d'accès ou de les faire évaluer dans un ordre incorrect ;
une erreur dans le traitement des packets SIP malformés provoque un rechargement du système ou un arrêt inopiné. Un utilisateur malveillant peut provoquer un déni de service à distance au moyen d'un paquet SIP conçu à cet effet ;
une erreur dans l'inspection du trafic HTTP, quand cette inspection est activée, provoque le rechargement ou l'arrêt du système. Un utilisateur malveillant peut provoquer un déni de service à distance au moyen d'une communication HTTP conçue à cet effet ;
une erreur dans l'inspection du trafic des protocoles basés sur TCP, quand cette inspection est activée, provoque le rechargement ou l'arrêt du système. Un utilisateur malveillant peut provoquer un déni de service à distance au moyen d'une communication basée sur TCP (HTTP, FTP...) conçue à cet effet ;
Plusieurs erreurs affectant le traitement des requêtes HTTPS, SNMP et HTTP (URL longues) par FWSM 3.x provoquent le rechargement du système. Dans certaines conditions, un utilisateur malveillant peut provoquer un déni de service à distance au moyen de trafic conçu à cet effet.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Cisco	N/A	Cisco PIX 500 versions 6.x et 7.x ;
Cisco	N/A	Cisco ASA 5500 versions 7.x ;
Cisco	N/A	Cisco Firewall Service Module (FWSM) versions 2.x et 3.x.

References

Title

Publication Time

Tags

Bulletins Cisco du 14 février 2007	None	vendor-advisory
Bulletin de sécurité Cisco ID 77853 du 14 février 2007 :	-	other
Bulletin de sécurité Cisco ID 72327 du 14 février 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco PIX 500 versions 6.x et 7.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco ASA 5500 versions 7.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Firewall Service Module (FWSM) versions 2.x et 3.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s affectent les produits Cisco pr\u00e9cit\u00e9s :\n\n-   une erreur dans la m\u00e9thode d\u0027authentification LOCAL de PIX 6.x\n    permet \u00e0 un utilisateur authentifi\u00e9 malveillant disposant des\n    privil\u00e8ges minimaux (level 0) d\u0027obtenir les privil\u00e8ges maximaux\n    (level 15) ;\n-   une erreur dans la gestion des listes de contr\u00f4le d\u0027acc\u00e8s (ACL) par\n    FWSM permet \u00e0 un utilisateur malveillant de ne pas faire \u00e9valuer des\n    r\u00e8gles de contr\u00f4le d\u0027acc\u00e8s ou de les faire \u00e9valuer dans un ordre\n    incorrect ;\n-   une erreur dans le traitement des packets SIP malform\u00e9s provoque un\n    rechargement du syst\u00e8me ou un arr\u00eat inopin\u00e9. Un utilisateur\n    malveillant peut provoquer un d\u00e9ni de service \u00e0 distance au moyen\n    d\u0027un paquet SIP con\u00e7u \u00e0 cet effet ;\n-   une erreur dans l\u0027inspection du trafic HTTP, quand cette inspection\n    est activ\u00e9e, provoque le rechargement ou l\u0027arr\u00eat du syst\u00e8me. Un\n    utilisateur malveillant peut provoquer un d\u00e9ni de service \u00e0 distance\n    au moyen d\u0027une communication HTTP con\u00e7ue \u00e0 cet effet ;\n-   une erreur dans l\u0027inspection du trafic des protocoles bas\u00e9s sur TCP,\n    quand cette inspection est activ\u00e9e, provoque le rechargement ou\n    l\u0027arr\u00eat du syst\u00e8me. Un utilisateur malveillant peut provoquer un\n    d\u00e9ni de service \u00e0 distance au moyen d\u0027une communication bas\u00e9e sur\n    TCP (HTTP, FTP...) con\u00e7ue \u00e0 cet effet ;\n-   Plusieurs erreurs affectant le traitement des requ\u00eates HTTPS, SNMP\n    et HTTP (URL longues) par FWSM 3.x provoquent le rechargement du\n    syst\u00e8me. Dans certaines conditions, un utilisateur malveillant peut\n    provoquer un d\u00e9ni de service \u00e0 distance au moyen de trafic con\u00e7u \u00e0\n    cet effet.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0966"
    },
    {
      "name": "CVE-2007-0963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0963"
    },
    {
      "name": "CVE-2007-0964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0964"
    },
    {
      "name": "CVE-2007-0960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0960"
    },
    {
      "name": "CVE-2007-0967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0967"
    },
    {
      "name": "CVE-2007-0962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0962"
    },
    {
      "name": "CVE-2007-0968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0968"
    },
    {
      "name": "CVE-2007-0961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0961"
    },
    {
      "name": "CVE-2007-0965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0965"
    },
    {
      "name": "CVE-2007-0959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0959"
    }
  ],
  "initial_release_date": "2007-02-16T00:00:00",
  "last_revision_date": "2007-02-27T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco ID 77853 du 14 f\u00e9vrier 2007 :",
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco ID 72327 du 14 f\u00e9vrier 2007 :",
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"
    }
  ],
  "reference": "CERTA-2007-AVI-090",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-02-16T00:00:00.000000"
    },
    {
      "description": "correction des liens.",
      "revision_date": "2007-02-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s sur les produits \u003cspan class=\"textit\"\u003eCisco\nPIX, ASA\u003c/span\u003e et \u003cspan class=\"textit\"\u003eFWSM\u003c/span\u003e permettent de\nr\u00e9aliser un d\u00e9ni de service \u00e0 distance, de contourner la politique de\ns\u00e9curit\u00e9 ou d\u0027\u00e9lever ses privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de produits Cisco",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins Cisco du 14 f\u00e9vrier 2007",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2007-0961 (GCVE-0-2007-0961)

Vulnerability from cvelistv5

CERTA-2007-AVI-090

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature