CVE Vulnerabilities

CVE-2013-1155

Improper Authentication

Published: Apr 11, 2013 | Modified: Apr 15, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Firewall_services_module_software Cisco 3.1 (including) 3.1 (including)
Firewall_services_module_software Cisco 3.2 (including) 3.2 (including)
Firewall_services_module_software Cisco 3.2(1) (including) 3.2(1) (including)
Firewall_services_module_software Cisco 3.2(2) (including) 3.2(2) (including)
Firewall_services_module_software Cisco 3.2(3) (including) 3.2(3) (including)
Firewall_services_module_software Cisco 3.2(4) (including) 3.2(4) (including)
Firewall_services_module_software Cisco 3.2(5) (including) 3.2(5) (including)
Firewall_services_module_software Cisco 3.2(6) (including) 3.2(6) (including)
Firewall_services_module_software Cisco 3.2(7) (including) 3.2(7) (including)
Firewall_services_module_software Cisco 3.2(8) (including) 3.2(8) (including)
Firewall_services_module_software Cisco 3.2(9) (including) 3.2(9) (including)
Firewall_services_module_software Cisco 3.2(10) (including) 3.2(10) (including)
Firewall_services_module_software Cisco 3.2(11) (including) 3.2(11) (including)
Firewall_services_module_software Cisco 3.2(12) (including) 3.2(12) (including)
Firewall_services_module_software Cisco 3.2(13) (including) 3.2(13) (including)
Firewall_services_module_software Cisco 3.2(14) (including) 3.2(14) (including)
Firewall_services_module_software Cisco 3.2(15) (including) 3.2(15) (including)
Firewall_services_module_software Cisco 3.2(16) (including) 3.2(16) (including)
Firewall_services_module_software Cisco 3.2(17) (including) 3.2(17) (including)
Firewall_services_module_software Cisco 3.2(18) (including) 3.2(18) (including)
Firewall_services_module_software Cisco 3.2(19) (including) 3.2(19) (including)
Firewall_services_module_software Cisco 3.2(20) (including) 3.2(20) (including)
Firewall_services_module_software Cisco 4.0 (including) 4.0 (including)
Firewall_services_module_software Cisco 4.0(1) (including) 4.0(1) (including)
Firewall_services_module_software Cisco 4.0(2) (including) 4.0(2) (including)
Firewall_services_module_software Cisco 4.0(3) (including) 4.0(3) (including)
Firewall_services_module_software Cisco 4.0(4) (including) 4.0(4) (including)
Firewall_services_module_software Cisco 4.0(5) (including) 4.0(5) (including)
Firewall_services_module_software Cisco 4.0(6) (including) 4.0(6) (including)
Firewall_services_module_software Cisco 4.0(7) (including) 4.0(7) (including)
Firewall_services_module_software Cisco 4.0(8) (including) 4.0(8) (including)
Firewall_services_module_software Cisco 4.0(10) (including) 4.0(10) (including)
Firewall_services_module_software Cisco 4.0(11) (including) 4.0(11) (including)
Firewall_services_module_software Cisco 4.0(12) (including) 4.0(12) (including)
Firewall_services_module_software Cisco 4.0(13) (including) 4.0(13) (including)
Firewall_services_module_software Cisco 4.0(14) (including) 4.0(14) (including)
Firewall_services_module_software Cisco 4.0(15) (including) 4.0(15) (including)
Firewall_services_module_software Cisco 4.1 (including) 4.1 (including)
Firewall_services_module_software Cisco 4.1(1) (including) 4.1(1) (including)
Firewall_services_module_software Cisco 4.1(2) (including) 4.1(2) (including)
Firewall_services_module_software Cisco 4.1(3) (including) 4.1(3) (including)
Firewall_services_module_software Cisco 4.1(4) (including) 4.1(4) (including)
Firewall_services_module_software Cisco 4.1(5) (including) 4.1(5) (including)

Potential Mitigations

References