Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.
References
- 1024963 vdb-entry
- asa-startup-security-bypass(64604) vdb-entry
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
- 45767 vdb-entry
- 42931 third-party-advisory