Buffer overflow in Cisco 5500 Series Adaptive Security Appliance
CVE-2011-0379
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.2 allows remote attackers to execute arbitrary code via a crafted Cisco Discovery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761.
Vulnerability class: Buffer Overflow
EPSS: 0.021 (80.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco 5500_series_adaptive_security_appliance
- Cisco Adaptive_security_appliance_software — versions 1.6.0
- Cisco Asa_5500
- Cisco Telepresence_manager — versions 1.2.0.0, 1.3.2, 1.4.0
- Cisco Telepresence_multipoint_switch
- Cisco Telepresence_multipoint_switch_software — versions 1.0.4.0, 1.1.0, 1.1.1
- Cisco Telepresence_system_1000
- Cisco Telepresence_system_1100
- Cisco Telepresence_system_1300_series
- Cisco Telepresence_system_3000
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)