NVD

Id
52027  
Name
CVE-2009-4912  
Description
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-06-29  
Modified Date
2010-06-30  
Seq
2009-4912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262968 52027 CVE-2009-4912 http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37085 JVNDB-2010-002865 Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 Cisco Adaptive Security Appliances (ASA) デバイスは、たとえ権限をもっていないクライアントであったとしても、SSL と HTTPS クライアントのハンドシェイク処理を完了させてしまうため、アクセス制限を回避される脆弱性が存在します。 CVE-2009-4912 42343 CVE-2009-4912 52027 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002865.html 2010-06-29 2011-09-20 View