CVE-2010-0149
First published: Fri Feb 19 2010(Updated: )
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASA 5500 CSC-SSM | =8.0 | |
| Cisco PIX | ||
| Cisco ASA 5500 CSC-SSM | =8.2 | |
| Cisco ASA 5500 CSC-SSM | =7.2 | |
| Cisco ASA 5500 CSC-SSM | =7.1 | |
| Cisco ASA 5500 CSC-SSM | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/38618
- http://www.vupen.com/english/advisories/2010/0415
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml
- http://www.securityfocus.com/bid/38275
- http://secunia.com/advisories/38636
- http://www.securitytracker.com/id?1023612
- http://osvdb.org/62433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56336
Frequently Asked Questions
What is the severity of CVE-2010-0149?
CVE-2010-0149 is classified as a denial of service vulnerability that allows remote attackers to prevent new connections.
How do I fix CVE-2010-0149?
To mitigate CVE-2010-0149, upgrade your Cisco ASA 5500 or PIX 500 Series Security Appliance to a version that is later than those specified.
Which devices are affected by CVE-2010-0149?
CVE-2010-0149 affects Cisco ASA 5500 Series Adaptive Security Appliances running versions 7.2, 8.0, 8.1, and 8.2, as well as Cisco PIX 500 Series Security Appliances.
What version of Cisco ASA is vulnerable to CVE-2010-0149?
Versions of Cisco ASA 5500 Series Adaptive Security Appliance prior to 7.2(4.46), 8.0(4.38), 8.1(2.29), and 8.2(1.5) are vulnerable to CVE-2010-0149.
What kind of attack can exploit CVE-2010-0149?
CVE-2010-0149 can be exploited by remote attackers to launch denial of service attacks that prevent new connections to the affected devices.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco asa 5500 csc-ssm
- version/cisco asa 5500 csc-ssm/8.0
- canonical/cisco pix
- version/cisco asa 5500 csc-ssm/8.2
- version/cisco asa 5500 csc-ssm/7.2
- version/cisco asa 5500 csc-ssm/7.1
- version/cisco asa 5500 csc-ssm/8.1