CVE-2010-0568
First published: Fri Feb 19 2010(Updated: )
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before 8.1(2.40), and 8.2 before 8.2(2.1); and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted username, aka Bug ID CSCte21953.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASA 5500 CSC-SSM | =8.0 | |
| Cisco PIX | ||
| Cisco ASA 5500 CSC-SSM | =8.2 | |
| Cisco ASA 5500 CSC-SSM | =7.2 | |
| Cisco ASA 5500 CSC-SSM | =7.1 | |
| Cisco ASA 5500 CSC-SSM | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securitytracker.com/id?1023612
- http://www.vupen.com/english/advisories/2010/0415
- http://secunia.com/advisories/38618
- http://www.securityfocus.com/bid/38279
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml
- http://secunia.com/advisories/38636
- http://osvdb.org/62437
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56342
Frequently Asked Questions
What is the severity of CVE-2010-0568?
CVE-2010-0568 is classified as a high-severity vulnerability due to allowing remote attackers to bypass authentication.
How do I fix CVE-2010-0568?
To fix CVE-2010-0568, you should upgrade your Cisco ASA 5500 or PIX Security Appliance to the appropriate patched version.
Which Cisco products are affected by CVE-2010-0568?
CVE-2010-0568 affects Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX 500 Series Security Appliances.
What versions of Cisco ASA are vulnerable to CVE-2010-0568?
CVE-2010-0568 affects Cisco ASA versions prior to 7.0(8.10), 7.2(4.45), 8.0(5.7), 8.1(2.40), and 8.2(2.1).
Can CVE-2010-0568 lead to unauthorized access?
Yes, CVE-2010-0568 can potentially lead to unauthorized access by allowing attackers to bypass NTLMv1 authentication.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco asa 5500 csc-ssm
- version/cisco asa 5500 csc-ssm/8.0
- canonical/cisco pix
- version/cisco asa 5500 csc-ssm/8.2
- version/cisco asa 5500 csc-ssm/7.2
- version/cisco asa 5500 csc-ssm/7.1
- version/cisco asa 5500 csc-ssm/8.1