The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.
References
Link | Resource |
---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6682 | Vendor Advisory |
http://tools.cisco.com/security/center/viewAlert.x?alertId=31692 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2013-11-13 15:55
Updated : 2023-08-15 14:52
NVD link : CVE-2013-6682
Mitre link : CVE-2013-6682
CVE.ORG link : CVE-2013-6682
JSON object : View
Products Affected
cisco
- adaptive_security_appliance_software
CWE
CWE-20
Improper Input Validation