CVE-2011-0395

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2011-02-25

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Adaptive Security Appliance (Cisco)
• Adaptive Security Appliance Software (Cisco)
• Asa 5500 (Cisco)
• Asa 5505 (Cisco)
• Asa 5510 (Cisco)
• Asa 5520 (Cisco)
• Asa 5540 (Cisco)
• Asa 5550 (Cisco)
• Asa 5580 (Cisco)
• Pix 500 (Cisco)
• Pix 501 (Cisco)
• Pix 506e (Cisco)
• Pix Firewall 506 (Cisco)
• Pix Firewall 515 (Cisco)
• Pix Firewall 520 (Cisco)
• Pix Firewall 525 (Cisco)
• Pix Firewall 535 (Cisco)

References

• http://secunia.com/advisories/43488
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml
• http://www.securitytracker.com/id?1025108
• http://www.vupen.com/english/advisories/2011/0493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65590