CVE-2007-5568: Input Validation

Q: What is the severity of CVE-2007-5568?

CVE-2007-5568 has been classified as a high severity vulnerability due to its ability to cause a denial of service.

Q: How do I fix CVE-2007-5568?

To remediate CVE-2007-5568, update your Cisco PIX or ASA appliances to a supported version beyond 8.0 software.

Q: What devices are affected by CVE-2007-5568?

CVE-2007-5568 affects Cisco PIX and ASA appliances running software versions 7.0 through 8.0, as well as the Cisco Firewall Services Module version 3.1(5) and earlier.

Q: What type of attack does CVE-2007-5568 enable?

CVE-2007-5568 allows remote attackers to conduct denial of service attacks that result in device reloads.

Q: Is CVE-2007-5568 still a concern for current systems?

Yes, CVE-2007-5568 remains a concern if vulnerable versions of the Cisco devices are still in use without appropriate updates.

Published Oct 18, 2007

Updated

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a denial of service (device reload) via a crafted MGCP packet, aka CSCsi90468 (appliance) and CSCsi00694 (FWSM).

Affected Software

49 affected components

cisco Firewall Services Module<=3.1\(5\)

Cisco Adaptive Security Appliance Software=7.0

Cisco Adaptive Security Appliance Software=7.0\(4\)

Cisco Adaptive Security Appliance Software=7.0\(5\)

Cisco Adaptive Security Appliance Software=7.0\(5.2\)

Cisco Adaptive Security Appliance Software=7.0\(6.7\)

Cisco Adaptive Security Appliance Software=7.0.1.4

Cisco Adaptive Security Appliance Software=7.0.4.3

Cisco Adaptive Security Appliance Software=7.1\(2\)

Cisco Adaptive Security Appliance Software=7.1\(2.5\)

Cisco Adaptive Security Appliance Software=7.1\(2.27\)

Cisco Adaptive Security Appliance Software=7.1\(2.48\)

Cisco Adaptive Security Appliance Software=7.1\(2.49\)

Cisco Adaptive Security Appliance Software=7.2\(1\)

Cisco Adaptive Security Appliance Software=7.2\(1.22\)

Cisco Adaptive Security Appliance Software=7.2\(2\)

Cisco Adaptive Security Appliance Software=7.2\(2.7\)

Cisco Adaptive Security Appliance Software=7.2\(2.8\)

Cisco Adaptive Security Appliance Software=7.2\(2.10\)

Cisco Adaptive Security Appliance Software=7.2\(2.14\)

Cisco Adaptive Security Appliance Software=7.2\(2.15\)

Cisco Adaptive Security Appliance Software=7.2\(2.16\)

Cisco Adaptive Security Appliance Software=7.2\(2.17\)

Cisco Adaptive Security Appliance Software=7.2\(2.19\)

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=7.0.1.4

Cisco Adaptive Security Appliance Software=7.1\(2.48\)

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=7.2\(1\)

Cisco Adaptive Security Appliance Software=7.0

Cisco Adaptive Security Appliance Software=7.0\(5\)

Cisco Adaptive Security Appliance Software=7.2\(2.8\)

Cisco Adaptive Security Appliance Software=7.2\(2.14\)

Cisco Adaptive Security Appliance Software=7.0\(6.7\)

Cisco Adaptive Security Appliance Software=7.2\(2.17\)

Cisco Adaptive Security Appliance Software=7.2\(2.19\)

Cisco Adaptive Security Appliance Software=7.1\(2.49\)

Cisco Adaptive Security Appliance Software=7.2\(2.15\)

Cisco Adaptive Security Appliance Software=7.2\(2\)

Cisco Adaptive Security Appliance Software=7.1\(2\)

Cisco Adaptive Security Appliance Software=7.2\(2.16\)

Cisco Adaptive Security Appliance Software=7.2\(2.10\)

Cisco Adaptive Security Appliance Software=7.2\(2.7\)

Cisco Adaptive Security Appliance Software=7.2\(1.22\)

Cisco Adaptive Security Appliance Software=7.1\(2.27\)

Cisco Adaptive Security Appliance Software=7.0\(5.2\)

Cisco Adaptive Security Appliance Software=7.0.4.3

Cisco Adaptive Security Appliance Software=7.1\(2.5\)

Cisco Adaptive Security Appliance Software=7.0\(4\)

Event History

Oct 18, 2007

CVE Published

09:17 PM

Oct 19, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5568?

CVE-2007-5568 has been classified as a high severity vulnerability due to its ability to cause a denial of service.

How do I fix CVE-2007-5568?

To remediate CVE-2007-5568, update your Cisco PIX or ASA appliances to a supported version beyond 8.0 software.

What devices are affected by CVE-2007-5568?

CVE-2007-5568 affects Cisco PIX and ASA appliances running software versions 7.0 through 8.0, as well as the Cisco Firewall Services Module version 3.1(5) and earlier.

What type of attack does CVE-2007-5568 enable?

CVE-2007-5568 allows remote attackers to conduct denial of service attacks that result in device reloads.

Is CVE-2007-5568 still a concern for current systems?