Sign-up

ID

VAR-201101-0004


CVE

CVE-2009-5037


TITLE

Cisco Adaptive Security Appliances Service disruption on devices (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2011-001111

DESCRIPTION

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911. The problem is Bug IDs CSCsm11264 and CSCtb92911 It is a problem.Too long by a third party URL Through service disruption (DoS) There is a possibility of being put into a state. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. This issue is documented in Cisco bug IDs CSCsm11264 and CSCtb92911

Trust: 1.98

sources: NVD: CVE-2009-5037 // JVNDB: JVNDB-2011-001111 // BID: 45763 // VULHUB: VHN-42483

AFFECTED PRODUCTS

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.5

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2.2

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.8

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.48\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2\(1\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2.1

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.18\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.19\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.10\)

Trust: 1.6

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.3

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2.4

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0\(0\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.7\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.16\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2.3

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0\(5\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1\(2.49\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0\(6.7\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(1\)

Trust: 1.0

vendor:ciscomodel:5500 series adaptive security appliancescope:eqversion:*

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1\(2\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.5\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:lteversion:8.2\(2\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.4.3

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1\(2.27\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.1

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.1.4

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.0.4

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2.5

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2.2

Trust: 1.0

vendor:ciscomodel:asa 5500scope:eqversion:*

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1\(5\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.15\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0\(4\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.7

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0\(2\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.6

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.4

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1\(2.5\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0\(5.2\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:8.2.1

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0.5

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.0

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.8\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1\(2.48\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.1.1

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.17\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(1.22\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliance softwarescope:eqversion:7.2\(2.14\)

Trust: 1.0

vendor:ciscomodel:adaptive security appliancescope:ltversion:5500 version 8.2(3)

Trust: 0.8

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(2.17)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(2.13)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(2.10)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(2.1)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(2)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(1.5)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(1.2)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(1.16)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(1.15)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2(1.10)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.2

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.1(2.40)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.1(2.39)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.1(2.37)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.1(2.35)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.1(2.29)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.1

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.0(5.1)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.0(4.44)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.0(4.38)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55008.0

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55007.2(4.46)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55007.2(4.45)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55007.2(4.44)

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55007.2

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55007.1

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:eqversion:55007.0

Trust: 0.3

vendor:ciscomodel:asa series adaptive security appliancescope:neversion:55008.2(3)

Trust: 0.3

sources: BID: 45763 // JVNDB: JVNDB-2011-001111 // CNNVD: CNNVD-201101-022 // NVD: CVE-2009-5037

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2009-5037
value: MEDIUM

Trust: 1.0

NVD: CVE-2009-5037
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201101-022
value: MEDIUM

Trust: 0.6

VULHUB: VHN-42483
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2009-5037
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-42483
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-42483 // JVNDB: JVNDB-2011-001111 // CNNVD: CNNVD-201101-022 // NVD: CVE-2009-5037

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-42483 // JVNDB: JVNDB-2011-001111 // NVD: CVE-2009-5037

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201101-022

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201101-022

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-001111

PATCH
title:22291url:http://tools.cisco.com/security/center/viewAlert.x?alertId=22291
Trust: 0.8
title:Release Notes for the Cisco ASA 5500 Series, Version 8.2(x)url:http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2011-001111

EXTERNAL IDS
db:NVDid:CVE-2009-5037
Trust: 2.8
db:SECTRACKid:1024963
Trust: 1.9
db:VUPENid:ADV-2011-0130
Trust: 0.8
db:XFid:64732
Trust: 0.8
db:JVNDBid:JVNDB-2011-001111
Trust: 0.8
db:CNNVDid:CNNVD-201101-022
Trust: 0.7
db:BIDid:45763
Trust: 0.4
db:VULHUBid:VHN-42483
Trust: 0.1
sources:
            
            
            VULHUB: VHN-42483 // 
            
            
            
            BID: 45763 // 
            
            
            
            JVNDB: JVNDB-2011-001111 // 
            
            
            
            CNNVD: CNNVD-201101-022 // 
            
            
            
            NVD: CVE-2009-5037

REFERENCES
url:https://supportforums.cisco.com/thread/2018112
Trust: 2.0
url:https://supportforums.cisco.com/thread/238724
Trust: 2.0
url:http://www.cisco.com/en/us/docs/security/asa/asa82/release/notes/asarn82.pdf
Trust: 1.7
url:http://www.securitytracker.com/id?1024963
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/64732
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-5037
Trust: 0.8
url:http://xforce.iss.net/xforce/xfdb/64732
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-5037
Trust: 0.8
url:http://securitytracker.com/id?1024963
Trust: 0.8
url:http://www.vupen.com/english/advisories/2011/0130
Trust: 0.8
url:http://www.cisco.com/
Trust: 0.3
sources:
            
            
            VULHUB: VHN-42483 // 
            
            
            
            BID: 45763 // 
            
            
            
            JVNDB: JVNDB-2011-001111 // 
            
            
            
            CNNVD: CNNVD-201101-022 // 
            
            
            
            NVD: CVE-2009-5037

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 45763

SOURCES
db:VULHUBid:VHN-42483
db:BIDid:45763
db:JVNDBid:JVNDB-2011-001111
db:CNNVDid:CNNVD-201101-022
db:NVDid:CVE-2009-5037

LAST UPDATE DATE
2024-11-23T21:47:04.280000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-42483date:2017-08-17T00:00:00
db:BIDid:45763date:2010-05-27T00:00:00
db:JVNDBid:JVNDB-2011-001111date:2011-02-23T00:00:00
db:CNNVDid:CNNVD-201101-022date:2011-01-10T00:00:00
db:NVDid:CVE-2009-5037date:2024-11-21T01:11:02.493

SOURCES RELEASE DATE
db:VULHUBid:VHN-42483date:2011-01-07T00:00:00
db:BIDid:45763date:2010-05-27T00:00:00
db:JVNDBid:JVNDB-2011-001111date:2011-02-23T00:00:00
db:CNNVDid:CNNVD-201101-022date:2011-01-10T00:00:00
db:NVDid:CVE-2009-5037date:2011-01-07T12:00:43.750