CVE-2010-4682

Description

Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867.

Related CPE's

ociscoadaptive_security_appliance_software********

ociscoadaptive_security_appliance_software7.0*******

ociscoadaptive_security_appliance_software7.0\(0\)*******

ociscoadaptive_security_appliance_software7.0\(2\)*******

ociscoadaptive_security_appliance_software7.0\(4\)*******

ociscoadaptive_security_appliance_software7.0\(5\)*******

ociscoadaptive_security_appliance_software7.0\(5.2\)*******

ociscoadaptive_security_appliance_software7.0\(6.7\)*******

ociscoadaptive_security_appliance_software7.0.1*******

ociscoadaptive_security_appliance_software7.0.1.4*******

References

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

45767

42931

1024963

asa-ldap-dos(64608)

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:L/Au:N/C:N/I:N/A:C

AccessVector

NETWORK

AccessComplexity

LOW

Authentication

NONE

ConfidentialityImpact

NONE

IntegrityImpact

NONE

AvailabilityImpact

COMPLETE

BaseScore

7.800000190734863

Created by Yello
About Severity.io