CVE-2011-0379

25.02.2011, 12:00

Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.2 allows remote attackers to execute arbitrary code via a crafted Cisco Discovery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761.

Severity

UNKNOWN

AV:A/AC:M/Au:N/C:C/I:C/A:C

Atk. Vector

ADJACENT_NETWORK

Atk. Complexity

MEDIUM

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Vendor	Product	Version
cisco	adaptive_security_appliance_software	1.6.0
cisco	5500_series_adaptive_security_appliance	*
cisco	asa_5500	*
cisco	telepresence_multipoint_switch_software	1.0.4.0
cisco	telepresence_multipoint_switch_software	1.1.0
cisco	telepresence_multipoint_switch_software	1.1.1
cisco	telepresence_multipoint_switch_software	1.1.2
cisco	telepresence_multipoint_switch_software	1.5.0
cisco	telepresence_multipoint_switch_software	1.5.1
cisco	telepresence_multipoint_switch_software	1.5.2
cisco	telepresence_multipoint_switch_software	1.5.3
cisco	telepresence_multipoint_switch_software	1.5.4
cisco	telepresence_multipoint_switch_software	1.5.5
cisco	telepresence_multipoint_switch_software	1.5.6
cisco	telepresence_multipoint_switch_software	1.6.0
cisco	telepresence_multipoint_switch_software	1.6.1
cisco	telepresence_multipoint_switch_software	1.6.2
cisco	telepresence_multipoint_switch_software	1.6.3
cisco	telepresence_multipoint_switch_software	1.6.4
cisco	telepresence_multipoint_switch	*
cisco	telepresence_system_software	1.2.3
cisco	telepresence_system_software	1.3.2
cisco	telepresence_system_software	1.4.7
cisco	telepresence_system_software	1.5.1
cisco	telepresence_system_software	1.5.3
cisco	telepresence_system_software	1.5.10
cisco	telepresence_system_software	1.5.11
cisco	telepresence_system_software	1.5.12
cisco	telepresence_system_software	1.5.13
cisco	telepresence_system_software	1.6.0
cisco	telepresence_system_software	1.6.2
cisco	telepresence_system_software	1.6.3
cisco	telepresence_system_software	1.6.4
cisco	telepresence_system_software	1.6.5
cisco	telepresence_system_software	1.6.6
cisco	telepresence_system_software	1.6.7
cisco	telepresence_system_software	1.6.8
cisco	telepresence_system_1000	*
cisco	telepresence_system_1100	*
cisco	telepresence_system_software	1.2.3
cisco	telepresence_system_software	1.3.2
cisco	telepresence_system_software	1.4.7
cisco	telepresence_system_software	1.5.1
cisco	telepresence_system_software	1.5.3
cisco	telepresence_system_software	1.5.10
cisco	telepresence_system_software	1.5.11
cisco	telepresence_system_software	1.5.12
cisco	telepresence_system_software	1.5.13
cisco	telepresence_system_software	1.6.0
cisco	telepresence_system_software	1.6.2
cisco	telepresence_system_software	1.6.3
cisco	telepresence_system_software	1.6.4
cisco	telepresence_system_software	1.6.5
cisco	telepresence_system_software	1.6.6
cisco	telepresence_system_software	1.6.7
cisco	telepresence_system_software	1.6.8
cisco	telepresence_system_3000	*
cisco	telepresence_system_software	1.5.10
cisco	telepresence_system_software	1.5.11
cisco	telepresence_system_software	1.5.12
cisco	telepresence_system_software	1.5.13
cisco	telepresence_system_1300_series	*
cisco	telepresence_system_3200_series	*
cisco	telepresence_system_software	1.4.7
cisco	telepresence_system_software	1.5.1
cisco	telepresence_system_software	1.5.3
cisco	telepresence_system_software	1.5.10
cisco	telepresence_system_software	1.5.11
cisco	telepresence_system_software	1.5.12
cisco	telepresence_system_software	1.5.13
cisco	telepresence_system_software	1.6.0
cisco	telepresence_system_software	1.6.2
cisco	telepresence_system_software	1.6.3
cisco	telepresence_system_software	1.6.4
cisco	telepresence_system_software	1.6.5
cisco	telepresence_system_software	1.6.6
cisco	telepresence_system_software	1.6.7
cisco	telepresence_system_software	1.6.8
cisco	telepresence_system_500_series	*
cisco	telepresence_manager	1.2.0.0
cisco	telepresence_manager	1.3.2
cisco	telepresence_manager	1.4.0
cisco	telepresence_manager	1.5.1
cisco	telepresence_manager	1.5.2
cisco	telepresence_manager	1.6.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml

http://www.securitytracker.com/id?1025111

http://www.securitytracker.com/id?1025112

http://www.securitytracker.com/id?1025113

http://www.securitytracker.com/id?1025114