CVE-2009-4916: Medium severity cisco asa 5580 firmware vulnerability

Q: What is the severity of CVE-2009-4916?

CVE-2009-4916 is classified as a denial of service vulnerability.

Q: How do I fix CVE-2009-4916?

To fix CVE-2009-4916, upgrade the Cisco Adaptive Security Appliance software to version 8.1(2) or later.

Q: What devices are affected by CVE-2009-4916?

CVE-2009-4916 affects Cisco Adaptive Security Appliance 5580 series devices running software versions prior to 8.1(2).

Q: What type of attack does CVE-2009-4916 enable?

CVE-2009-4916 allows authenticated remote users to cause a denial of service during failover replication.

Q: Is there a workaround for CVE-2009-4916?

There are no documented workarounds for CVE-2009-4916 besides upgrading to a fixed software version.

Published Jun 29, 2010

Updated

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action during failover replication, aka Bug ID CSCsq80095.

Affected Software

1 affected component

Cisco Asa 5580<=8.1\(1\)

Remediation

Patch Available

http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html

Event History

Jun 29, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4916?

CVE-2009-4916 is classified as a denial of service vulnerability.

How do I fix CVE-2009-4916?