Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a users VPN session, which allows local users to hijack a session via a man-in-the-middle attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pix_firewall_software | Cisco | 6.0 (including) | 6.0 (including) |
| Pix_firewall_software | Cisco | 6.0(1) (including) | 6.0(1) (including) |
| Pix_firewall_software | Cisco | 6.0(2) (including) | 6.0(2) (including) |
| Pix_firewall_software | Cisco | 6.0(3) (including) | 6.0(3) (including) |
| Pix_firewall_software | Cisco | 6.1 (including) | 6.1 (including) |
| Pix_firewall_software | Cisco | 6.1(2) (including) | 6.1(2) (including) |
| Pix_firewall_software | Cisco | 6.1(3) (including) | 6.1(3) (including) |