CVE-2008-1246: High severity cisco finesse vulnerability

Published Mar 10, 2008

Updated

DISPUTED The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties, including one who works for the vendor, have been unable to reproduce the flaw unless the enable password is blank.

Affected Software

2 affected components

Cisco Pix Asa Finesse Operation System=7.1

Cisco Pix Asa Finesse Operation System=7.2

Event History

Mar 10, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Disputed

05:44 PM

Frequently Asked Questions

What is the severity of CVE-2008-1246?

CVE-2008-1246 has been assigned a moderate severity due to potential local privilege escalation.

How do I fix CVE-2008-1246?

To mitigate CVE-2008-1246, it's recommended to upgrade the Cisco PIX/ASA Finesse Operating System to a version beyond 7.2.

Who is affected by CVE-2008-1246?

CVE-2008-1246 affects users of Cisco PIX/ASA Finesse Operating System versions 7.1 and 7.2.

What type of vulnerability is CVE-2008-1246?

CVE-2008-1246 is a local privilege escalation vulnerability.

Can CVE-2008-1246 be exploited remotely?

CVE-2008-1246 cannot be exploited remotely as it requires local access to the affected systems.