CVE-2009-1155: High severity cisco adaptive security appliance 5500 vulnerability

Published Apr 9, 2009

Updated

Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.

Affected Software

8 affected components

cisco Adaptive Security Appliance 5500=7.1

cisco Adaptive Security Appliance 5500=7.2

cisco Adaptive Security Appliance 5500=8.0

cisco Adaptive Security Appliance 5500=8.1

cisco PIX=7.1

cisco PIX=7.2

cisco PIX=8.0

cisco PIX=8.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

Event History

Apr 9, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1155?

CVE-2009-1155 is classified as a high severity vulnerability due to its potential to allow remote attackers to bypass authentication.

How do I fix CVE-2009-1155?

To fix CVE-2009-1155, upgrade your Cisco Adaptive Security Appliance or PIX Firewall to a version that is not vulnerable, specifically after the specified fixed versions.

Which devices are affected by CVE-2009-1155?

CVE-2009-1155 affects Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances running specific vulnerable software versions.

What happens if I am affected by CVE-2009-1155?

If affected by CVE-2009-1155, an attacker may exploit the vulnerability to gain unauthorized access by bypassing authentication mechanisms.

Is CVE-2009-1155 exploitable over the internet?

Yes, CVE-2009-1155 can be exploited remotely, making it critical to patch or mitigate in environments exposed to the internet.