CVE-2009-1203: Medium severity cisco adaptive security appliance software vulnerability

Published Jun 25, 2009

Updated

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.

Affected Software

4 affected components

Cisco Adaptive Security Appliance=8.0\(4\)

Cisco Adaptive Security Appliance=8.1.2

Cisco Adaptive Security Appliance=8.2.1

Cisco Adaptive Security Appliance

Event History

Jun 25, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

05:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1203?

CVE-2009-1203 has a medium severity rating due to its potential to facilitate phishing attacks.

How do I fix CVE-2009-1203?

To mitigate CVE-2009-1203, it is recommended to upgrade the Cisco Adaptive Security Appliance to a version that addresses this vulnerability.

What versions of Cisco Adaptive Security Appliance are affected by CVE-2009-1203?

CVE-2009-1203 affects Cisco Adaptive Security Appliance software versions 8.0(4), 8.1.2, and 8.2.1.

What type of attack does CVE-2009-1203 enable?

CVE-2009-1203 enables attackers to conduct phishing attacks by tricking users into entering credentials in a spoofed login interface.

Can CVE-2009-1203 be exploited remotely?

Yes, CVE-2009-1203 can be exploited remotely, making it a significant concern for organizations using affected Cisco devices.