{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-02-14T00:00:00", "descriptions": [{"lang": "en", "value": "Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2007-0608", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0608"}, {"name": "24180", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24180"}, {"name": "20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"}, {"name": "1017651", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017651"}, {"name": "22561", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22561"}, {"name": "cisco-pix-asa-http-dos(32486)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32486"}, {"name": "33055", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/33055"}, {"name": "22562", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22562"}, {"name": "24160", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24160"}, {"name": "20070214 Multiple Vulnerabilities in Firewall Services Module", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"}, {"name": "1017652", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017652"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0962", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2007-0608", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0608"}, {"name": "24180", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24180"}, {"name": "20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"}, {"name": "1017651", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017651"}, {"name": "22561", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22561"}, {"name": "cisco-pix-asa-http-dos(32486)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32486"}, {"name": "33055", "refsource": "OSVDB", "url": "http://osvdb.org/33055"}, {"name": "22562", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22562"}, {"name": "24160", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24160"}, {"name": "20070214 Multiple Vulnerabilities in Firewall Services Module", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"}, {"name": "1017652", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017652"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0962", "datePublished": "2007-02-16T00:00:00", "dateReserved": "2007-02-15T00:00:00", "dateUpdated": "2017-07-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "E9A8528D-DF6A-4493-A77E-CBF08359F2E4", "vulnerable": true}, {"criteria": "cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "F90E9070-781D-4D3D-98EB-5B6DB9D3C75E", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "891B8FA4-B602-42C5-A94F-8C60BBF7A7D1", "vulnerable": true}, {"criteria": "cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "856917BD-179B-4C43-8EA6-034254720B63", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "B009CCE4-908C-4830-B0E0-7B4CB33280F9", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "640CDC78-22D3-4E60-8D36-F088D8DB27DA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic."}, {"lang": "es", "value": "Cisco PIX 500 y ASA 5500 Series Security Appliances 7.x versiones anteriores a 7.0(4.14), 7.1 versiones anteriores a 7.1(2.1), y el FWSM 2.x versiones anteriores a 2.3(4.12) y 3.x versiones anteriores a 3.1(3.24), cuando \"inspect http\" est\u00e1 habilitado, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (reinicio de dispositivo) mediante tr\u00e1fico HTTP mal-formado."}], "id": "CVE-2007-0962", "lastModified": "2018-10-30T16:25:19.340", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-02-16T00:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/33055"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24160"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/24180"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://securitytracker.com/id?1017651"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22561"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22562"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1017652"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0608"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32486"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}