Unscored CVE-2013-6682 EUVD-2013-6484GHSA-j62m-465v-c87q

The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 cer…

Published Nov 13, 2013 · Updated Sep 17, 2024 · Assigned by cisco

Description

The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an invalid entry, aka Bug ID CSCui33299.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=31692
20131108 Cisco Adaptive Security Appliance Phone Proxy Database Entry Manipulation Vulnerability vendor-advisory