CVE-2009-1160 Security feature bypass in n/a
Remote attackers can bypass intended access restrictions on Cisco ASA and PIX firewalls due to improper implementation of the implicit deny statement.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-1160?
CVE-2009-1160 is a medium-severity vulnerability in n/a, published on 9 Apr 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.
Weakness: CWE-264
Which versions are affected by CVE-2009-1160?
It affects 2 products.
Products include Cisco Adaptive Security Appliance 5500, Cisco Pix.
How do I fix CVE-2009-1160?
No fix has been published for CVE-2009-1160 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-1160 being exploited?
There is no known exploitation of CVE-2009-1160 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-rrxx-7pc4-7jx7.