CVE

Id
38638  
CVE No.
CVE-2009-1203  
Status
Candidate  
Description
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.  
Phase
Assigned (20090331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423119 38638 CVE-2009-1203 BUGTRAQ:20090624 Trustwave"s SpiderLabs Security Advisory TWSL2009-002  View
423120 38638 CVE-2009-1203 URL:http://www.securityfocus.com/archive/1/archive/1/504516/100/0/threaded  View
423121 38638 CVE-2009-1203 BID:35475  View
423122 38638 CVE-2009-1203 URL:http://www.securityfocus.com/bid/35475  View
423123 38638 CVE-2009-1203 SECTRACK:1022457  View
423124 38638 CVE-2009-1203 URL:http://www.securitytracker.com/id?1022457  View
423125 38638 CVE-2009-1203 SECUNIA:35511  View
423126 38638 CVE-2009-1203 URL:http://secunia.com/advisories/35511  View
423127 38638 CVE-2009-1203 VUPEN:ADV-2009-1713  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40174 JVNDB-2009-001180 Sun Solaris の dircmp スクリプトにおける競合状態の脆弱性 Sun Solaris の dircmp スクリプトには、競合状態の脆弱性が存在します。 CVE-2009-1207 38638 4.7 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001180.html  View