CVE-2007-0959: High severity Cisco ASA 5500 vulnerability

Published Feb 16, 2007

Updated

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malformed TCP packets.

Affected Software

2 affected components

Cisco ASA 5500=7.2\(2\)

Cisco Pix Firewall Software=7.2\(2\)

Remediation

Patch Available

http://www.securitytracker.com/id?1017651

Event History

Feb 16, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0959?

CVE-2007-0959 is classified as a high severity vulnerability due to its potential to cause a denial of service, leading to device reboot.

How do I fix CVE-2007-0959?

To fix CVE-2007-0959, upgrade your Cisco PIX or ASA 5500 device to a version higher than 7.2(2) that addresses this vulnerability.

What protocols are affected by CVE-2007-0959?

CVE-2007-0959 affects TCP-based protocols when the Cisco firewalls are configured to inspect them.

Can CVE-2007-0959 be exploited remotely?

Yes, CVE-2007-0959 can be exploited remotely by sending malformed TCP packets to the affected devices.

Which devices are impacted by CVE-2007-0959?

CVE-2007-0959 specifically affects Cisco PIX 500 and ASA 5500 Series Security Appliances running version 7.2(2).