Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.106654
Kategorie:CISCO
Titel:Cisco Adaptive Security Appliance BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability (cisco-sa-20170315-asa)
Zusammenfassung:A vulnerability in the Border Gateway Protocol (BGP); Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance; (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list; (ACL) for specific TCP and UDP traffic.
Beschreibung:Summary:
A vulnerability in the Border Gateway Protocol (BGP)
Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance
(ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list
(ACL) for specific TCP and UDP traffic.

Vulnerability Insight:
The vulnerability occurs because the BFD implementation
incorrectly allows traffic with destination ports 3784 and 3785 through the interface ACLs.

Vulnerability Impact:
An attacker could exploit this vulnerability by sending TCP or
UDP packets with a destination port of 3784 or 3785 through the ASA.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2017-3867
BugTraq ID: 96926
http://www.securityfocus.com/bid/96926
http://www.securitytracker.com/id/1038051
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.