CVE-2009-1159: High severity cisco pix vulnerability

Published Apr 9, 2009

Updated

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQLNet inspection is enabled, allows remote attackers to cause a denial of service (traceback and device reload) via a series of SQLNet packets.

Affected Software

6 affected components

cisco PIX=8.1

cisco Adaptive Security Appliance 5500=8.1

cisco PIX=8.0

cisco Adaptive Security Appliance 5500=7.2

cisco Adaptive Security Appliance 5500=8.0

cisco PIX=7.2

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

Event History

Apr 9, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1159?

CVE-2009-1159 has a severity rating that indicates it can lead to a denial of service on affected devices.

How do I fix CVE-2009-1159?

To mitigate CVE-2009-1159, upgrade your Cisco Adaptive Security Appliances and PIX Security Appliances to the recommended version provided in vendor advisories.

What products are affected by CVE-2009-1159?

CVE-2009-1159 affects Cisco Adaptive Security Appliance 5500 Series and PIX Security Appliances running specific versions of their software.

Can CVE-2009-1159 be exploited remotely?

Yes, CVE-2009-1159 can be exploited remotely by attackers when SQL*Net inspection is enabled.

What impact does CVE-2009-1159 have on the system?

CVE-2009-1159 can cause a traceback and reload of affected devices, effectively leading to a denial of service.