CVE-2007-0397

Currently unrated

Key Information:

Vendor
Cisco
Status
Security Monitoring Analysis And Response System
Vendor
CVE Published:
20 January 2007

Summary

The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.

References

http://securitytracker.com/id?1017535
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/22111
vdb-entryx_refsource_BID
http://osvdb.org/32720
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.