CVE-2011-0395
First published: Fri Feb 25 2011(Updated: )
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | =8.0\(2\) | |
| Cisco Adaptive Security Appliance Software | =8.0\(3\) | |
| Cisco Adaptive Security Appliance Software | =8.0\(4\) | |
| Cisco Adaptive Security Appliance Software | =8.0\(5\) | |
| Cisco Adaptive Security Appliance Software | =8.1\(1\) | |
| Cisco Adaptive Security Appliance Software | =8.1\(2\) | |
| Cisco Adaptive Security Appliance Software | =8.2 | |
| Cisco Adaptive Security Appliance Software | =8.2\(1\) | |
| Cisco Adaptive Security Appliance Software | =8.2\(2\) | |
| Cisco Adaptive Security Appliance Software | =8.3 | |
| Cisco Adaptive Security Appliance Software | =8.0 | |
| Cisco Adaptive Security Appliance Software | =8.3\(1\) | |
| Cisco ASA 5500 CSC-SSM | ||
| Cisco ASA 5505 Firmware | ||
| Cisco ASA 5510 firmware | ||
| Cisco ASA Software | ||
| Cisco ASA | ||
| Cisco ASA 5550 firmware | ||
| Cisco ASA 5580 Firmware | ||
| Cisco PIX | ||
| Cisco PIX Firewall | ||
| Cisco PIX 506E | ||
| Cisco PIX | ||
| Cisco PIX Firewall | ||
| Cisco PIX | ||
| Cisco PIX | ||
| Cisco PIX Firewall |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-0395?
The severity of CVE-2011-0395 is classified as high due to the potential for remote denial of service.
How do I fix CVE-2011-0395?
To fix CVE-2011-0395, upgrade the Cisco Adaptive Security Appliance software to the latest version recommended by Cisco.
Which devices are affected by CVE-2011-0395?
CVE-2011-0395 affects Cisco Adaptive Security Appliance (ASA) 5500 series devices running specific versions of software prior to the patches.
What type of attack does CVE-2011-0395 enable?
CVE-2011-0395 enables remote attackers to execute a denial of service attack on affected Cisco ASA devices.
Are there any workarounds for CVE-2011-0395?
While upgrading is the best fix, temporarily disabling the RIP protocol and Cisco Phone Proxy may help mitigate the risk associated with CVE-2011-0395.
- collector/nvd-historical
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/cisco
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/8.0\(2\)
- version/cisco adaptive security appliance software/8.0\(3\)
- version/cisco adaptive security appliance software/8.0\(4\)
- version/cisco adaptive security appliance software/8.0\(5\)
- version/cisco adaptive security appliance software/8.1\(1\)
- version/cisco adaptive security appliance software/8.1\(2\)
- version/cisco adaptive security appliance software/8.2
- version/cisco adaptive security appliance software/8.2\(1\)
- version/cisco adaptive security appliance software/8.2\(2\)
- version/cisco adaptive security appliance software/8.3
- version/cisco adaptive security appliance software/8.0
- version/cisco adaptive security appliance software/8.3\(1\)
- canonical/cisco asa 5500 csc-ssm
- canonical/cisco asa 5505 firmware
- canonical/cisco asa 5510 firmware
- canonical/cisco asa software
- canonical/cisco asa
- canonical/cisco asa 5550 firmware
- canonical/cisco asa 5580 firmware
- canonical/cisco pix
- canonical/cisco pix firewall
- canonical/cisco pix 506e