Site icon Liquidmatrix Security Digest

Cisco PIX and ASA Vulns

This came out on Wednesday. My apologies for the late posting.

Multiple vulnerabilities are found in Cisco PIX 500 Series Security Appliances and the Cisco ASA 5500 Series Adaptive Security Appliances. They affect the following:

* Enhanced inspection of Malformed Hypertext Transfer Protocol (HTTP) traffic
* Inspection of malformed Session Initiation Protocol (SIP) packets
* Inspection of a stream of malformed Transmission Control Protocol (TCP) packets
* Privilege escalation

These vulnerabilities are independent of each other. If a vulnerability affects a device, it does not necessarily mean that the device is affected by all of them.

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070214-pix.shtml.

[tags]CiscoVulnerability, Cisco PIX, Cisco SIP[/tags]

Exit mobile version