What is the severity of CVE-2009-1203?

CVE-2009-1203 has a medium severity rating due to its potential to facilitate phishing attacks.

How do I fix CVE-2009-1203?

To mitigate CVE-2009-1203, it is recommended to upgrade the Cisco Adaptive Security Appliance to a version that addresses this vulnerability.

What versions of Cisco Adaptive Security Appliance are affected by CVE-2009-1203?

CVE-2009-1203 affects Cisco Adaptive Security Appliance software versions 8.0(4), 8.1.2, and 8.2.1.

What type of attack does CVE-2009-1203 enable?

CVE-2009-1203 enables attackers to conduct phishing attacks by tricking users into entering credentials in a spoofed login interface.

Can CVE-2009-1203 be exploited remotely?

Yes, CVE-2009-1203 can be exploited remotely, making it a significant concern for organizations using affected Cisco devices.

Vulnerability/
CVE-2009-1203

medium

CWE

NVD-CWE-Other

25/6/2009

7/8/2024

CVE-2009-1203

First published: Thu Jun 25 2009(Updated: )

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Cisco Adaptive Security Appliance Software	=8.0\(4\)
Cisco Adaptive Security Appliance Software	=8.1.2
Cisco Adaptive Security Appliance Software	=8.2.1
Cisco Adaptive Security Appliance Software

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2009-1203?
CVE-2009-1203 has a medium severity rating due to its potential to facilitate phishing attacks.
How do I fix CVE-2009-1203?
To mitigate CVE-2009-1203, it is recommended to upgrade the Cisco Adaptive Security Appliance to a version that addresses this vulnerability.
What versions of Cisco Adaptive Security Appliance are affected by CVE-2009-1203?
CVE-2009-1203 affects Cisco Adaptive Security Appliance software versions 8.0(4), 8.1.2, and 8.2.1.
What type of attack does CVE-2009-1203 enable?
CVE-2009-1203 enables attackers to conduct phishing attacks by tricking users into entering credentials in a spoofed login interface.
Can CVE-2009-1203 be exploited remotely?
Yes, CVE-2009-1203 can be exploited remotely, making it a significant concern for organizations using affected Cisco devices.

collector/nvd-historical
agent/softwarecombine
agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/references
agent/last-modified-date
agent/weakness
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco adaptive security appliance software
version/cisco adaptive security appliance software/8.0\(4\)
version/cisco adaptive security appliance software/8.1.2
version/cisco adaptive security appliance software/8.2.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.