CVE-2013-6682

Published Nov 13, 2013 CVSS 2.0 · 6.4 Medium EPSS < 1% KEV · Not listed
Description
The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-6484 The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Sep 17, 2024, 12:05 AM
Reserved
Nov 7, 2013, 12:00 AM
Status
Modified
Published
Nov 13, 2013, 3:55 PM
Modified
Jun 17, 2026, 12:00 AM