CVE-2011-0393: High severity cisco pix vulnerability

Q: What is the severity of CVE-2011-0393?

CVE-2011-0393 has been assigned a high severity level due to its potential impact on the affected Cisco devices.

Q: How do I fix CVE-2011-0393?

To fix CVE-2011-0393, upgrade to the recommended versions of Cisco Adaptive Security Appliance Software or Cisco PIX Security Appliance Software as specified by Cisco advisories.

Q: Which devices are affected by CVE-2011-0393?

CVE-2011-0393 affects Cisco Adaptive Security Appliances (ASA) 5500 series and Cisco PIX Security Appliances 500 series devices.

Q: What allows the exploit in CVE-2011-0393?

The exploit in CVE-2011-0393 is possible due to improper handling of certain firewall mode configurations in the affected Cisco devices.

Q: Is there a mitigation strategy for CVE-2011-0393?

Apart from updating the software, disabling unnecessary features and services on the affected devices can help mitigate CVE-2011-0393.

Published Feb 25, 2011

Updated

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2 before 8.2(3.6), and 8.3 before 8.3(2.7) and Cisco PIX Security Appliances 500 series devices, when transparent firewall mode is configured but IPv6 is not configured, allow remote attackers to cause a denial of service (packet buffer exhaustion and device outage) via IPv6 traffic, aka Bug ID CSCtj04707.

Affected Software

63 affected components

cisco PIX 500

Cisco Adaptive Security Appliance Software<=8.3\(1\)

Cisco Adaptive Security Appliance Software=7.0

Cisco Adaptive Security Appliance Software=7.0\(0\)

Cisco Adaptive Security Appliance Software=7.0\(2\)

Cisco Adaptive Security Appliance Software=7.0\(4\)

Cisco Adaptive Security Appliance Software=7.0\(5\)

Cisco Adaptive Security Appliance Software=7.0\(5.2\)

Cisco Adaptive Security Appliance Software=7.0\(6.7\)

Cisco Adaptive Security Appliance Software=7.0.1

Cisco Adaptive Security Appliance Software=7.0.1.4

Cisco Adaptive Security Appliance Software=7.0.2

Cisco Adaptive Security Appliance Software=7.0.4

Cisco Adaptive Security Appliance Software=7.0.4.3

Cisco Adaptive Security Appliance Software=7.0.5

Cisco Adaptive Security Appliance Software=7.0.6

Cisco Adaptive Security Appliance Software=7.0.7

Cisco Adaptive Security Appliance Software=7.0.8

Cisco Adaptive Security Appliance Software=7.0.8-interim

Cisco Adaptive Security Appliance Software=7.1

Cisco Adaptive Security Appliance Software=7.1\(2\)

Cisco Adaptive Security Appliance Software=7.1\(2.5\)

Cisco Adaptive Security Appliance Software=7.1\(2.27\)

Cisco Adaptive Security Appliance Software=7.1\(2.48\)

Cisco Adaptive Security Appliance Software=7.1\(2.49\)

Cisco Adaptive Security Appliance Software=7.1\(5\)

Cisco Adaptive Security Appliance Software=7.1.1

Cisco Adaptive Security Appliance Software=7.1.2

Cisco Adaptive Security Appliance Software=7.2

Cisco Adaptive Security Appliance Software=7.2\(1\)

Cisco Adaptive Security Appliance Software=7.2\(1.22\)

Cisco Adaptive Security Appliance Software=7.2\(2\)

Cisco Adaptive Security Appliance Software=7.2\(2.5\)

Cisco Adaptive Security Appliance Software=7.2\(2.7\)

Cisco Adaptive Security Appliance Software=7.2\(2.8\)

Cisco Adaptive Security Appliance Software=7.2\(2.10\)

Cisco Adaptive Security Appliance Software=7.2\(2.14\)

Cisco Adaptive Security Appliance Software=7.2\(2.15\)

Cisco Adaptive Security Appliance Software=7.2\(2.16\)

Cisco Adaptive Security Appliance Software=7.2\(2.17\)

Cisco Adaptive Security Appliance Software=7.2\(2.18\)

Cisco Adaptive Security Appliance Software=7.2\(2.19\)

Cisco Adaptive Security Appliance Software=7.2\(2.48\)

Cisco Adaptive Security Appliance Software=7.2.1

Cisco Adaptive Security Appliance Software=7.2.2

Cisco Adaptive Security Appliance Software=7.2.3

Cisco Adaptive Security Appliance Software=7.2.4

Cisco Adaptive Security Appliance Software=7.2.5

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=8.0.2

Cisco Adaptive Security Appliance Software=8.0.3

Cisco Adaptive Security Appliance Software=8.0.4

Cisco Adaptive Security Appliance Software=8.0.5

Cisco Adaptive Security Appliance Software=8.2\(1\)

Cisco Adaptive Security Appliance Software=8.2\(2\)

Cisco Adaptive Security Appliance Software=8.2\(3\)

Cisco Adaptive Security Appliance Software=8.2\(3.9\)

Cisco Adaptive Security Appliance Software=8.2\(4\)

Cisco Adaptive Security Appliance Software=8.2.1

Cisco Adaptive Security Appliance Software=8.2.2

Cisco Adaptive Security Appliance Software=8.2.2-interim

cisco 5500 Series Adaptive Security Appliance

cisco ASA 5500

Event History

Feb 25, 2011

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0393?

CVE-2011-0393 has been assigned a high severity level due to its potential impact on the affected Cisco devices.

How do I fix CVE-2011-0393?

To fix CVE-2011-0393, upgrade to the recommended versions of Cisco Adaptive Security Appliance Software or Cisco PIX Security Appliance Software as specified by Cisco advisories.

Which devices are affected by CVE-2011-0393?

CVE-2011-0393 affects Cisco Adaptive Security Appliances (ASA) 5500 series and Cisco PIX Security Appliances 500 series devices.

What allows the exploit in CVE-2011-0393?

The exploit in CVE-2011-0393 is possible due to improper handling of certain firewall mode configurations in the affected Cisco devices.

Is there a mitigation strategy for CVE-2011-0393?