Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.106052
Categoría:CISCO
Título:Cisco ASA DNS DoS Vulnerability
Resumen:A vulnerability in the DNS code of Cisco ASA may lead to a denial;of service.
Descripción:Summary:
A vulnerability in the DNS code of Cisco ASA may lead to a denial
of service.

Vulnerability Insight:
A vulnerability in the DNS code could allow an unauthenticated,
remote attacker to cause an affected system to reload. The vulnerability is due to improper processing of
DNS packets. An attacker could exploit this vulnerability by sending a crafted request to an affected Cisco
ASA device to cause it to generate a DNS request packet. The attacker would need to spoof the reply packet
with a crafted DNS response.

Vulnerability Impact:
An unauthenticated, remote attacker could cause the system to reload.

Affected Software/OS:
Version 7.2, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 9.0, 9.1, 9.2, 9.3 and 9.4
on Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series
Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600
Series Routers, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco FirePOWER 9300 ASA Security Module

Solution:
Apply the appropriate updates from Cisco.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Referencia Cruzada: BugTraq ID: 77261
Common Vulnerability Exposure (CVE) ID: CVE-2015-6326
Cisco Security Advisory: 20151021 Cisco ASA Software DNS Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns2
http://www.securitytracker.com/id/1034156
CopyrightThis script is Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.