NVD

Id
48491  
Name
CVE-2009-1203  
Description
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-25  
Modified Date
2010-05-04  
Seq
2009-1203  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244455 48491 CVE-2009-1203 20090624 Trustwave"s SpiderLabs Security Advisory TWSL2009-002  View
244456 48491 CVE-2009-1203 35475  View
244457 48491 CVE-2009-1203 1022457  View
244458 48491 CVE-2009-1203 ADV-2009-1713  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40865 JVNDB-2009-001871 Cisco Adaptive Security Appliances (ASA) デバイスの WebVPN における WebVPN 証明書を送信させられやすくなる脆弱性 Cisco Adaptive Security Appliances (ASA) デバイス上の WebVPN には、FTP および CIFS サーバのためのログインスクリーンと自身のログインスクリーンを正しく区別しないため、任意のサーバへ WebVPN 証明書を送信させられやすくなる脆弱性が存在します。 CVE-2009-1203 38634 CVE-2009-1203 48491 6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001871.html 2009-06-25 2009-08-12 View