Unscored CVE-2014-0739 EUVD-2014-0770GHSA-xhmg-fcjg-c5rx

Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers…

Published Feb 22, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and provide certain pass-through services to untrusted devices via a crafted configuration-file TFTP request, aka Bug ID CSCuj66766.

References

20140220 Cisco Adaptive Security Appliance Phone Proxy sec_db Race Condition Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32955