CVE-2007-5569: Input Validation

Published Oct 18, 2007

Updated

Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.

Affected Software

5 affected components

cisco Adaptive Security Appliance=7.2

cisco PIX 500=7.1_software

cisco PIX 500=7.2_software

Cisco Adaptive Security Appliance Software=7.1

Event History

Oct 18, 2007

CVE Published

09:17 PM

Oct 19, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5569?

CVE-2007-5569 is classified as a high severity vulnerability due to its potential to cause a denial of service by triggering a device reload.

How do I fix CVE-2007-5569?

To fix CVE-2007-5569, upgrade affected Cisco PIX and ASA appliances to a version that addresses this vulnerability.

Who is affected by CVE-2007-5569?

CVE-2007-5569 affects Cisco PIX and ASA appliances running versions 7.1 and 7.2 software configured for TLS sessions.

What types of attacks does CVE-2007-5569 enable?

CVE-2007-5569 enables remote attackers to launch denial of service attacks via crafted TLS packets.

Is there a workaround for CVE-2007-5569?

There is no official workaround for CVE-2007-5569; the recommended action is to apply the appropriate software update.