OSVDB ID: 35331

Title: Cisco PIX / ASA Unspecified LDAP Authentication Bypass

Info

Disclosure

May 02, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

PIX/ASA contains a flaw that may allow a malicious user to bypass authentication. The issue is triggered when by an unspecified flaw in the LDAP implementation involving L2TP and Remote Management Access. It is possible that the flaw may allow unauthorized access resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified
OSVDB: Security Software

Solution

Upgrade to version 7.2(2)8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Cisco Systems, Inc.

PIX

7.2(1)
7.2(2)2

ASA

7.2(1)
7.2(2)2

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/35331