Test ID:	1.3.6.1.4.1.25623.1.0.806682
Category:	CISCO
Title:	Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability (cisco-sa-20160210-asa-ike)
Summary:	Cisco ASA Software is prone to a buffer overflow vulnerability.
Description:	Summary: Cisco ASA Software is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to buffer overflow error in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code. Vulnerability Impact: Successful exploitation allows the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Solution: See the referenced vendor advisory for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1287 CERT/CC vulnerability note: VU#327976 https://www.kb.cert.org/vuls/id/327976 Cisco Security Advisory: 20160210 Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike https://www.exploit-db.com/exploits/39823/ http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html https://blog.exodusintel.com/2016/02/10/firewall-hacking/ http://www.securitytracker.com/id/1034997
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.