CVE Vulnerabilities

CVE-2011-3297

Improper Authentication

Published: Oct 06, 2011 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Firewall_services_module_software Cisco 3.1 3.1
Firewall_services_module_software Cisco 3.1(2) 3.1(2)
Firewall_services_module_software Cisco 3.1(3) 3.1(3)
Firewall_services_module_software Cisco 3.1(4) 3.1(4)
Firewall_services_module_software Cisco 3.1(5) 3.1(5)
Firewall_services_module_software Cisco 3.1(6) 3.1(6)
Firewall_services_module_software Cisco 3.1(7) 3.1(7)
Firewall_services_module_software Cisco 3.1(8) 3.1(8)
Firewall_services_module_software Cisco 3.1(9) 3.1(9)
Firewall_services_module_software Cisco 3.1(10) 3.1(10)
Firewall_services_module_software Cisco 3.1(11) 3.1(11)
Firewall_services_module_software Cisco 3.1(12) 3.1(12)
Firewall_services_module_software Cisco 3.1(13) 3.1(13)
Firewall_services_module_software Cisco 3.1(14) 3.1(14)
Firewall_services_module_software Cisco 3.1(15) 3.1(15)
Firewall_services_module_software Cisco 3.1(16) 3.1(16)
Firewall_services_module_software Cisco 3.1(17) 3.1(17)
Firewall_services_module_software Cisco 3.1(18) 3.1(18)
Firewall_services_module_software Cisco 3.1(19) 3.1(19)
Firewall_services_module_software Cisco 3.1(20) 3.1(20)
Firewall_services_module_software Cisco 3.2 3.2
Firewall_services_module_software Cisco 3.2(1) 3.2(1)
Firewall_services_module_software Cisco 3.2(2) 3.2(2)
Firewall_services_module_software Cisco 3.2(3) 3.2(3)
Firewall_services_module_software Cisco 3.2(4) 3.2(4)
Firewall_services_module_software Cisco 3.2(5) 3.2(5)
Firewall_services_module_software Cisco 3.2(6) 3.2(6)
Firewall_services_module_software Cisco 3.2(7) 3.2(7)
Firewall_services_module_software Cisco 3.2(8) 3.2(8)
Firewall_services_module_software Cisco 3.2(9) 3.2(9)
Firewall_services_module_software Cisco 3.2(10) 3.2(10)
Firewall_services_module_software Cisco 3.2(11) 3.2(11)
Firewall_services_module_software Cisco 3.2(12) 3.2(12)
Firewall_services_module_software Cisco 3.2(13) 3.2(13)
Firewall_services_module_software Cisco 3.2(14) 3.2(14)
Firewall_services_module_software Cisco 3.2(15) 3.2(15)
Firewall_services_module_software Cisco 3.2(16) 3.2(16)
Firewall_services_module_software Cisco 3.2(17) 3.2(17)
Firewall_services_module_software Cisco 3.2(18) 3.2(18)
Firewall_services_module_software Cisco 3.2(19) 3.2(19)
Firewall_services_module_software Cisco 3.2(20) 3.2(20)
Firewall_services_module_software Cisco 3.2(21) 3.2(21)
Firewall_services_module_software Cisco 4.0 4.0
Firewall_services_module_software Cisco 4.0(1) 4.0(1)
Firewall_services_module_software Cisco 4.0(2) 4.0(2)
Firewall_services_module_software Cisco 4.0(3) 4.0(3)
Firewall_services_module_software Cisco 4.0(4) 4.0(4)
Firewall_services_module_software Cisco 4.0(5) 4.0(5)
Firewall_services_module_software Cisco 4.0(6) 4.0(6)
Firewall_services_module_software Cisco 4.0(7) 4.0(7)
Firewall_services_module_software Cisco 4.0(8) 4.0(8)
Firewall_services_module_software Cisco 4.0(10) 4.0(10)
Firewall_services_module_software Cisco 4.0(11) 4.0(11)
Firewall_services_module_software Cisco 4.0(12) 4.0(12)
Firewall_services_module_software Cisco 4.0(13) 4.0(13)
Firewall_services_module_software Cisco 4.0(14) 4.0(14)
Firewall_services_module_software Cisco 4.0(15) 4.0(15)
Firewall_services_module_software Cisco 4.1 4.1
Firewall_services_module_software Cisco 4.1(1) 4.1(1)
Firewall_services_module_software Cisco 4.1(2) 4.1(2)
Firewall_services_module_software Cisco 4.1(3) 4.1(3)
Firewall_services_module_software Cisco 4.1(4) 4.1(4)
Firewall_services_module_software Cisco 4.1(5) 4.1(5)
Firewall_services_module_software Cisco 4.1(6) 4.1(6)

Potential Mitigations

References