CVE

Id
28143  
CVE No.
CVE-2007-4786  
Status
Candidate  
Description
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291957 28143 CVE-2007-4786 MISC:http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903  View
291958 28143 CVE-2007-4786 CONFIRM:http://www.kb.cert.org/vuls/id/MIMG-74ZK93  View
291959 28143 CVE-2007-4786 CERT-VN:VU#563673  View
291960 28143 CVE-2007-4786 URL:http://www.kb.cert.org/vuls/id/563673  View
291961 28143 CVE-2007-4786 BID:25548  View
291962 28143 CVE-2007-4786 URL:http://www.securityfocus.com/bid/25548  View
291963 28143 CVE-2007-4786 VUPEN:ADV-2007-3076  View
291964 28143 CVE-2007-4786 URL:http://www.vupen.com/english/advisories/2007/3076  View
291965 28143 CVE-2007-4786 OSVDB:37499  View
291966 28143 CVE-2007-4786 URL:http://osvdb.org/37499  View
291967 28143 CVE-2007-4786 SECTRACK:1018660  View
291968 28143 CVE-2007-4786 URL:http://www.securitytracker.com/id?1018660  View
291969 28143 CVE-2007-4786 SECUNIA:26677  View
291970 28143 CVE-2007-4786 URL:http://secunia.com/advisories/26677  View
291971 28143 CVE-2007-4786 XF:cisco-asa-aaa-information-disclosure(36473)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53918 JVNDB-2007-002610 Cisco CSM などにおけるサービス運用妨害 (DoS) の脆弱性 Cisco Content Switching Modules (CSM) および Cisco Content Switching Module with SSL (CSM-S) には、サービス運用妨害 (CPU 消費またはリブート) 状態となる脆弱性が存在します。 CVE-2007-4788 28143 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002610.html  View