CVE-2007-0968: Critical severity Cisco Firewall Services Module vulnerability

Published Feb 16, 2007

Updated

Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.

Affected Software

2 affected components

Cisco Firewall Services Module=2.3

Cisco Firewall Services Module=3.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml

Event History

Feb 16, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0968?

CVE-2007-0968 is rated as a critical vulnerability that allows remote authenticated users to bypass access control protections.

How do I fix CVE-2007-0968?

To fix CVE-2007-0968, upgrade the Cisco Firewall Services Module to version 2.3(4.7) or later, or to version 3.1(3.1) or later.

What versions are affected by CVE-2007-0968?

CVE-2007-0968 affects Cisco Firewall Services Module versions before 2.3(4.7) and 3.x before 3.1(3.1).

What type of attack can exploit CVE-2007-0968?

CVE-2007-0968 can be exploited to bypass access controls and potentially allow unauthorized access to network resources.

Who is impacted by CVE-2007-0968?

Organizations using affected versions of Cisco Firewall Services Module are at risk due to CVE-2007-0968.