var-200702-0343
Vulnerability from variot
Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.3), when set to log at the "debug" level, allows remote attackers to cause a denial of service (device reboot) by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot during generation of Syslog message 710006. Cisco Firewall Services Module fails to properly inspect SIP messages. This vulnerability may allow a remote attacker to cause a denial of service condition. Multiple Cisco products are prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause vulnerable devices to reload, potentially causing denial-of-service conditions. Multiple security vulnerabilities exist in Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series Adaptive Security Appliances: Processing packets sent to FWSM could lead to reload +---------------- --------------------------------------- This vulnerability causes FWSM to generate 710006 syslog messages when attempting to overload occurs. The following two conditions must be met for this vulnerability to occur: * FWSM receives a message with a device IP address and the message is not the following protocol: TCP, UDP, ICMP, OSPF, Failover, PIM, IGMP, and ESP. Vulnerabilities are independent of the source of the packets. * Logging must be enabled at a high enough level to generate 710006 syslog messages, the default is debug level (level 7). Note that logging is disabled by default, and Cisco recommends logging at the debug level for debugging and error correction purposes only. This vulnerability is documented in Cisco Bug ID as CSCse85707.
Secunia is proud to announce the availability of the Secunia Software Inspector.
The Secunia Software Inspector is a free service that detects insecure versions of software that you may have installed in your system. When insecure versions are detected, the Secunia Software Inspector also provides thorough guidelines for updating the software to the latest secure version from the vendor.
Try it out online: http://secunia.com/software_inspector/
TITLE: Cisco Firewall Services Module Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA24172
VERIFY ADVISORY: http://secunia.com/advisories/24172/
CRITICAL: Moderately critical
IMPACT: Security Bypass, DoS
WHERE:
From remote
SOFTWARE: Cisco Firewall Services Module (FWSM) 3.x http://secunia.com/product/8614/
DESCRIPTION: Some vulnerabilities and a security issue have been reported in Cisco Firewall Services, which can be exploited by malicious people to cause a DoS or bypass certain security restrictions.
1) An unspecified error within the enhanced inspection of HTTP traffic can be exploited to cause the device to reload via specially crafted HTTP traffic.
Successful exploitation requires that enhanced inspection is enabled.
2) An error within the inspection of SIP packets can be exploited to cause the device to reload via specially crafted SIP packets.
Successful exploitation requires that SIP inspection is enabled.
3) An unspecified error when processing malformed HTTPS requests can be exploited to cause the device to reload by sending specially crafted HTTPS requests.
Successful exploitation requires that "authentication for network access" (auth-proxy) is enabled.
4) An error when processing HTTP requests with a very long URL can be exploited to cause the device to reload, but requires that "authentication for network access" (auth-proxy) is enabled.
5) An unspecified error exists when processing HTTPS traffic that is directed to the FWSM. This can be exploited to cause the device to reload by sending specially crafted HTTPS requests, but requires that the HTTPS server is enabled.
6) An unspecified error when processing malformed SNMP requests from a trusted device can be exploited to cause the affected device to reload.
Successful exploitation requires that the other, trusted device has explicit SNMP poll access.
7) A security issue when manipulating ACLs (Access Control Lists) that make use of object groups can corrupt ACLs, resulting in ACEs (Access Control Entries) being skipped or not evaluated in order, which can be exploited to bypass certain security restrictions.
Note: Only an administrative user can change ACLs. Additionally, this does not affected devices which are reloaded after ACLs have been manipulated.
A vulnerability that could cause the device to reload when "debugging" is enabled has also been reported.
SOLUTION: Apply updated software. Please see vendor advisory for a patch matrix.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20070214-fwsm.shtml
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-200702-0343", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "firewall services module", "scope": "eq", "trust": 1.9, "vendor": "cisco", "version": "3.1" }, { "model": "firewall services module", "scope": "eq", "trust": 1.1, "vendor": "cisco", "version": "3.1(3.3)" }, { "model": null, "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "firewall services module", "scope": "lt", "trust": 0.8, "vendor": "cisco", "version": "3.x" }, { "model": "pix/asa", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.0.4.3" }, { "model": "pix/asa", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.0.4" }, { "model": "pix/asa", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.0.1.4" }, { "model": "pix/asa", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.0" }, { "model": "pix/asa", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.1(2)" }, { "model": "pix/asa", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "7.0(5)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3.5(112)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3.3(133)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3.2" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3.1" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3(5)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3(3.109)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3(3.102)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3(3)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3(1)" }, { "model": "pix firewall", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "6.3" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(3.24)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(1.9)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(1.7)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(3.2)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(3.18)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(3.11)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "3.1(3.1)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "2.3(4.7)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "2.3(4)" }, { "model": "firewall services module", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "2.3" }, { "model": "pix/asa", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "7.2(2.10)" }, { "model": "pix/asa", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "7.1(2.5)" }, { "model": "pix/asa", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "7.0(5.2)" }, { "model": "pix firewall", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "6.3(5.115)" }, { "model": "firewall services module", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "3.1(4)" }, { "model": "firewall services module", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "2.3(4.12)" } ], "sources": [ { "db": "CERT/CC", "id": "VU#430969" }, { "db": "BID", "id": "22561" }, { "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "db": "NVD", "id": "CVE-2007-0963" }, { "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2007-0963" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco Security bulletin", "sources": [ { "db": "CNNVD", "id": "CNNVD-200702-309" } ], "trust": 0.6 }, "cve": "CVE-2007-0963", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "impactScore": 6.9, "integrityImpact": "NONE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 7.8, "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2007-0963", "impactScore": null, "integrityImpact": "None", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "VHN-24325", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2007-0963", "trust": 1.8, "value": "HIGH" }, { "author": "CARNEGIE MELLON", "id": "VU#430969", "trust": 0.8, "value": "12.60" }, { "author": "CNNVD", "id": "CNNVD-200702-309", "trust": 0.6, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-24325", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "CERT/CC", "id": "VU#430969" }, { "db": "VULHUB", "id": "VHN-24325" }, { "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "db": "NVD", "id": "CVE-2007-0963" }, { "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.3), when set to log at the \"debug\" level, allows remote attackers to cause a denial of service (device reboot) by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot during generation of Syslog message 710006. Cisco Firewall Services Module fails to properly inspect SIP messages. This vulnerability may allow a remote attacker to cause a denial of service condition. Multiple Cisco products are prone to multiple denial-of-service vulnerabilities. \nAttackers can exploit these issues to cause vulnerable devices to reload, potentially causing denial-of-service conditions. Multiple security vulnerabilities exist in Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series Adaptive Security Appliances: Processing packets sent to FWSM could lead to reload +---------------- --------------------------------------- This vulnerability causes FWSM to generate 710006 syslog messages when attempting to overload occurs. The following two conditions must be met for this vulnerability to occur: * FWSM receives a message with a device IP address and the message is not the following protocol: TCP, UDP, ICMP, OSPF, Failover, PIM, IGMP, and ESP. Vulnerabilities are independent of the source of the packets. * Logging must be enabled at a high enough level to generate 710006 syslog messages, the default is debug level (level 7). Note that logging is disabled by default, and Cisco recommends logging at the debug level for debugging and error correction purposes only. This vulnerability is documented in Cisco Bug ID as CSCse85707. \n\n----------------------------------------------------------------------\n\nSecunia is proud to announce the availability of the Secunia Software\nInspector. \n\nThe Secunia Software Inspector is a free service that detects insecure\nversions of software that you may have installed in your system. When\ninsecure versions are detected, the Secunia Software Inspector also\nprovides thorough guidelines for updating the software to the latest\nsecure version from the vendor. \n\nTry it out online:\nhttp://secunia.com/software_inspector/\n\n----------------------------------------------------------------------\n\nTITLE:\nCisco Firewall Services Module Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA24172\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/24172/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSecurity Bypass, DoS\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\nCisco Firewall Services Module (FWSM) 3.x\nhttp://secunia.com/product/8614/\n\nDESCRIPTION:\nSome vulnerabilities and a security issue have been reported in Cisco\nFirewall Services, which can be exploited by malicious people to cause\na DoS or bypass certain security restrictions. \n\n1) An unspecified error within the enhanced inspection of HTTP\ntraffic can be exploited to cause the device to reload via specially\ncrafted HTTP traffic. \n\nSuccessful exploitation requires that enhanced inspection is\nenabled. \n\n2) An error within the inspection of SIP packets can be exploited to\ncause the device to reload via specially crafted SIP packets. \n\nSuccessful exploitation requires that SIP inspection is enabled. \n\n3) An unspecified error when processing malformed HTTPS requests can\nbe exploited to cause the device to reload by sending specially\ncrafted HTTPS requests. \n\nSuccessful exploitation requires that \"authentication for network\naccess\" (auth-proxy) is enabled. \n\n4) An error when processing HTTP requests with a very long URL can be\nexploited to cause the device to reload, but requires that\n\"authentication for network access\" (auth-proxy) is enabled. \n\n5) An unspecified error exists when processing HTTPS traffic that is\ndirected to the FWSM. This can be exploited to cause the device to\nreload by sending specially crafted HTTPS requests, but requires that\nthe HTTPS server is enabled. \n\n6) An unspecified error when processing malformed SNMP requests from\na trusted device can be exploited to cause the affected device to\nreload. \n\nSuccessful exploitation requires that the other, trusted device has\nexplicit SNMP poll access. \n\n7) A security issue when manipulating ACLs (Access Control Lists)\nthat make use of object groups can corrupt ACLs, resulting in ACEs\n(Access Control Entries) being skipped or not evaluated in order,\nwhich can be exploited to bypass certain security restrictions. \n\nNote: Only an administrative user can change ACLs. Additionally, this\ndoes not affected devices which are reloaded after ACLs have been\nmanipulated. \n\nA vulnerability that could cause the device to reload when\n\"debugging\" is enabled has also been reported. \n\nSOLUTION:\nApply updated software. Please see vendor advisory for a patch\nmatrix. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20070214-fwsm.shtml\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n", "sources": [ { "db": "NVD", "id": "CVE-2007-0963" }, { "db": "CERT/CC", "id": "VU#430969" }, { "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "db": "BID", "id": "22561" }, { "db": "VULHUB", "id": "VHN-24325" }, { "db": "PACKETSTORM", "id": "54444" } ], "trust": 2.79 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2007-0963", "trust": 2.8 }, { "db": "BID", "id": "22561", "trust": 2.0 }, { "db": "SECUNIA", "id": "24172", "trust": 1.8 }, { "db": "VUPEN", "id": "ADV-2007-0609", "trust": 1.7 }, { "db": "CERT/CC", "id": "VU#430969", "trust": 1.1 }, { "db": "SECTRACK", "id": "1017650", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2007-001572", "trust": 0.8 }, { "db": "CISCO", "id": "20070214 MULTIPLE VULNERABILITIES IN FIREWALL SERVICES MODULE", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-200702-309", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-24325", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "54444", "trust": 0.1 } ], "sources": [ { "db": "CERT/CC", "id": "VU#430969" }, { "db": "VULHUB", "id": "VHN-24325" }, { "db": "BID", "id": "22561" }, { "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "db": "PACKETSTORM", "id": "54444" }, { "db": "NVD", "id": "CVE-2007-0963" }, { "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "id": "VAR-200702-0343", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-24325" } ], "trust": 0.01 }, "last_update_date": "2023-12-18T12:12:49.873000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "cisco-sa-20070214-fwsm", "trust": 0.8, "url": "http://www.cisco.com/en/us/products/csa/cisco-sa-20070214-fwsm.html" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2007-001572" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "NVD-CWE-Other", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2007-0963" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.7, "url": "http://www.securityfocus.com/bid/22561" }, { "trust": 1.7, "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a00807e2481.shtml" }, { "trust": 1.7, "url": "http://secunia.com/advisories/24172" }, { "trust": 1.2, "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070214-fwsm.shtml" }, { "trust": 1.1, "url": "http://www.vupen.com/english/advisories/2007/0609" }, { "trust": 0.8, "url": "http://securitytracker.com/alerts/2007/feb/1017650.html" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-0963" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-0963" }, { "trust": 0.6, "url": "http://www.frsirt.com/english/advisories/2007/0609" }, { "trust": 0.3, "url": "http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/" }, { "trust": 0.3, "url": "http://www.kb.cert.org/vuls/id/430969" }, { "trust": 0.3, "url": "/archive/1/460079" }, { "trust": 0.3, "url": "/archive/1/460080" }, { "trust": 0.3, "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070214-pix.shtml" }, { "trust": 0.1, "url": "http://secunia.com/secunia_security_advisories/" }, { "trust": 0.1, "url": "http://secunia.com/software_inspector/" }, { "trust": 0.1, "url": "http://secunia.com/product/8614/" }, { "trust": 0.1, "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org" }, { "trust": 0.1, "url": "http://secunia.com/about_secunia_advisories/" }, { "trust": 0.1, "url": "http://secunia.com/advisories/24172/" } ], "sources": [ { "db": "CERT/CC", "id": "VU#430969" }, { "db": "VULHUB", "id": "VHN-24325" }, { "db": "BID", "id": "22561" }, { "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "db": "PACKETSTORM", "id": "54444" }, { "db": "NVD", "id": "CVE-2007-0963" }, { "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CERT/CC", "id": "VU#430969" }, { "db": "VULHUB", "id": "VHN-24325" }, { "db": "BID", "id": "22561" }, { "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "db": "PACKETSTORM", "id": "54444" }, { "db": "NVD", "id": "CVE-2007-0963" }, { "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2007-02-16T00:00:00", "db": "CERT/CC", "id": "VU#430969" }, { "date": "2007-02-16T00:00:00", "db": "VULHUB", "id": "VHN-24325" }, { "date": "2007-02-14T00:00:00", "db": "BID", "id": "22561" }, { "date": "2012-06-26T00:00:00", "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "date": "2007-02-16T06:49:41", "db": "PACKETSTORM", "id": "54444" }, { "date": "2007-02-16T00:28:00", "db": "NVD", "id": "CVE-2007-0963" }, { "date": "2007-02-15T00:00:00", "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2007-02-22T00:00:00", "db": "CERT/CC", "id": "VU#430969" }, { "date": "2011-03-08T00:00:00", "db": "VULHUB", "id": "VHN-24325" }, { "date": "2016-07-06T14:40:00", "db": "BID", "id": "22561" }, { "date": "2012-06-26T00:00:00", "db": "JVNDB", "id": "JVNDB-2007-001572" }, { "date": "2011-03-08T02:51:02.893000", "db": "NVD", "id": "CVE-2007-0963" }, { "date": "2007-02-19T00:00:00", "db": "CNNVD", "id": "CNNVD-200702-309" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-200702-309" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco Firewall Services Module vulnerable to DoS via inspection of malformed SIP messages", "sources": [ { "db": "CERT/CC", "id": "VU#430969" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "other", "sources": [ { "db": "CNNVD", "id": "CNNVD-200702-309" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.