CVE-2011-4006

The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service (CPU consumption) via an unspecified closing sequence, aka Bug ID CSCtt32565.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/web/software/283878312/88166/ASA-851-Interim-Release-Notes.html
http://www.securitytracker.com/id?1027008
http://www.cisco.com/web/software/283878312/88166/ASA-851-Interim-Release-Notes.html
http://www.securitytracker.com/id?1027008

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim::::::
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:interim::::::
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\(1.4\):::::::*

cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:31

Type	Values Removed	Values Added
References	~~() http://www.cisco.com/web/software/283878312/88166/ASA-851-Interim-Release-Notes.html -~~	() http://www.cisco.com/web/software/283878312/88166/ASA-851-Interim-Release-Notes.html -
References	~~() http://www.securitytracker.com/id?1027008 -~~	() http://www.securitytracker.com/id?1027008 -

15 Aug 2023, 14:41

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.5\(1.4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.5\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.5:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(1\):::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\(1.4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5\(1\):::::::*

11 Aug 2023, 19:03

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3.1:interim:::::: cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.2:interim:::::: cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(5\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(3\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.3:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim:::::: cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(2\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:interim:::::: cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):::::::*

Information

Published : 2012-05-02 10:09

Updated : 2024-11-21 01:31

NVD link : CVE-2011-4006

Mitre link : CVE-2011-4006

CVE.ORG link : CVE-2011-4006

JSON object : View

Products Affected

cisco

adaptive_security_appliance_software
5500_series_adaptive_security_appliance

CWE

CWE-20

Improper Input Validation

7.8 /10