CVE-2011-0396

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2011-02-25

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Adaptive Security Appliance (Cisco)
• Adaptive Security Appliance Software (Cisco)
• Asa 5500 (Cisco)
• Asa 5505 (Cisco)
• Asa 5510 (Cisco)
• Asa 5520 (Cisco)
• Asa 5540 (Cisco)
• Asa 5550 (Cisco)
• Asa 5580 (Cisco)
• Pix 500 (Cisco)
• Pix 501 (Cisco)
• Pix 506e (Cisco)
• Pix Firewall 506 (Cisco)
• Pix Firewall 515 (Cisco)
• Pix Firewall 520 (Cisco)
• Pix Firewall 525 (Cisco)
• Pix Firewall 535 (Cisco)

References

• http://secunia.com/advisories/43488
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml
• http://www.securitytracker.com/id?1025108
• http://www.vupen.com/english/advisories/2011/0493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65591