Vulnerability Description
Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Adaptive Security Appliance Software | 7.0\(0\) |
References
- http://marc.info/?l=bugtraq&m=113199814008230&w=2
- http://marc.info/?l=bugtraq&m=113201784415859&w=2
- http://secunia.com/advisories/17550/Vendor Advisory
- http://securityreason.com/securityalert/178
- http://securitytracker.com/id?1015205Vendor Advisory
- http://www.securityfocus.com/bid/15407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
- http://marc.info/?l=bugtraq&m=113199814008230&w=2
- http://marc.info/?l=bugtraq&m=113201784415859&w=2
- http://secunia.com/advisories/17550/Vendor Advisory
- http://securityreason.com/securityalert/178
- http://securitytracker.com/id?1015205Vendor Advisory
- http://www.securityfocus.com/bid/15407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
FAQ
What is CVE-2005-3788?
CVE-2005-3788 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attacke...
How severe is CVE-2005-3788?
CVE-2005-3788 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-3788?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Adaptive Security Appliance Software.