CVE

Id
38637  
CVE No.
CVE-2009-1202  
Status
Candidate  
Description
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.  
Phase
Assigned (20090331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423110 38637 CVE-2009-1202 BUGTRAQ:20090624 Trustwave"s SpiderLabs Security Advisory TWSL2009-002  View
423111 38637 CVE-2009-1202 URL:http://www.securityfocus.com/archive/1/archive/1/504516/100/0/threaded  View
423112 38637 CVE-2009-1202 BID:35480  View
423113 38637 CVE-2009-1202 URL:http://www.securityfocus.com/bid/35480  View
423114 38637 CVE-2009-1202 SECTRACK:1022457  View
423115 38637 CVE-2009-1202 URL:http://www.securitytracker.com/id?1022457  View
423116 38637 CVE-2009-1202 SECUNIA:35511  View
423117 38637 CVE-2009-1202 URL:http://secunia.com/advisories/35511  View
423118 38637 CVE-2009-1202 VUPEN:ADV-2009-1713  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39931 JVNDB-2009-000016 futomi"s CGI Cafe 製高機能アクセス解析 CGI Professional 版における管理者権限奪取の脆弱性 futomi"s CGI Cafe が提供する高機能アクセス解析CGI Professional 版には、管理者権限が奪取可能である脆弱性が存在します。 CVE-2009-1206 38637 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000016.html  View