Description
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.
References
- 20140107 Cisco Adaptive Security Appliance Identity Firewall NetBIOS Logout Probe Auth State Change Vulnerability vendor-advisory
- cisco-asa-cve20140653-sec-bypass(90165) vdb-entry
- 64708 vdb-entry
- 56366 third-party-advisory
- 1029570 vdb-entry
- 101834 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32363