CVE-2005-3788: Race Condition
First published: Thu Nov 24 2005(Updated: )
Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | =7.0\(0\) | |
| Cisco Adaptive Security Appliance Software | =7.0\(2\) | |
| Cisco Adaptive Security Appliance Software | =7.0\(4\) | |
| Cisco Adaptive Security Appliance Software | =7.0\(2\) | |
| Cisco Adaptive Security Appliance Software | =7.0\(0\) | |
| Cisco Adaptive Security Appliance Software | =7.0\(4\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/15407
- http://securitytracker.com/id?1015205
- http://secunia.com/advisories/17550/
- http://securityreason.com/securityalert/178
- http://marc.info/?l=bugtraq&m=113201784415859&w=2
- http://marc.info/?l=bugtraq&m=113199814008230&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
Frequently Asked Questions
What is the severity of CVE-2005-3788?
CVE-2005-3788 is classified as a denial of service vulnerability that can lead to a failure of the standby firewall in Cisco Adaptive Security Appliance systems.
How do I fix CVE-2005-3788?
To fix CVE-2005-3788, you should upgrade to a patch version of the Cisco Adaptive Security Appliance software where the vulnerability is mitigated.
What software versions are affected by CVE-2005-3788?
CVE-2005-3788 affects Cisco Adaptive Security Appliance software versions 7.0(0), 7.0(2), and 7.0(4) when configured in an Active/Standby setup.
Can CVE-2005-3788 be exploited remotely?
Yes, CVE-2005-3788 can be exploited remotely by attackers sending spoofed ARP responses.
What is the impact of CVE-2005-3788 on network security?
The impact of CVE-2005-3788 on network security includes potential downtime and disruption of services due to a compromised standby firewall.
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-api
- vendor/cisco
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/7.0\(0\)
- version/cisco adaptive security appliance software/7.0\(2\)
- version/cisco adaptive security appliance software/7.0\(4\)