CVE-2011-0396

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/43488
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml	Vendor Advisory
http://www.securitytracker.com/id?1025108
http://www.vupen.com/english/advisories/2011/0493
https://exchange.xforce.ibmcloud.com/vulnerabilities/65591
http://secunia.com/advisories/43488
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml	Vendor Advisory
http://www.securitytracker.com/id?1025108
http://www.vupen.com/english/advisories/2011/0493
https://exchange.xforce.ibmcloud.com/vulnerabilities/65591

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:adaptive_security_appliance:8.0\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.0\(3\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.0\(4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.0\(5\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.1\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.1\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.2\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.2\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance:8.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):::::::*

OR	cpe:2.3:h:cisco:asa_5500::::::::
	cpe:2.3:h:cisco:asa_5505::::::::
	cpe:2.3:h:cisco:asa_5510::::::::
	cpe:2.3:h:cisco:asa_5520::::::::
	cpe:2.3:h:cisco:asa_5540::::::::
	cpe:2.3:h:cisco:asa_5550::::::::
	cpe:2.3:h:cisco:asa_5580::::::::
	cpe:2.3:h:cisco:pix_500::::::::
	cpe:2.3:h:cisco:pix_501::::::::
	cpe:2.3:h:cisco:pix_506e::::::::
	cpe:2.3:h:cisco:pix_firewall_506::::::::
	cpe:2.3:h:cisco:pix_firewall_515::::::::
	cpe:2.3:h:cisco:pix_firewall_520::::::::
	cpe:2.3:h:cisco:pix_firewall_525::::::::
	cpe:2.3:h:cisco:pix_firewall_535::::::::

History

21 Nov 2024, 01:23

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/43488 -~~	() http://secunia.com/advisories/43488 -
References	~~() http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - Vendor Advisory~~	() http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - Vendor Advisory
References	~~() http://www.securitytracker.com/id?1025108 -~~	() http://www.securitytracker.com/id?1025108 -
References	~~() http://www.vupen.com/english/advisories/2011/0493 -~~	() http://www.vupen.com/english/advisories/2011/0493 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/65591 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/65591 -

11 Aug 2023, 19:03

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.0:::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):::::::*

Information

Published : 2011-02-25 12:00

Updated : 2025-04-11 00:51

NVD link : CVE-2011-0396

Mitre link : CVE-2011-0396

CVE.ORG link : CVE-2011-0396

JSON object : View

Products Affected

cisco

pix_firewall_515
adaptive_security_appliance_software
asa_5510
pix_firewall_506
pix_firewall_535
asa_5550
pix_firewall_525
adaptive_security_appliance
asa_5520
asa_5580
asa_5505
pix_501
pix_506e
pix_firewall_520
asa_5500
pix_500
asa_5540

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2011-0396", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-02-25T12:00:19.307", "references": [{"url": "http://secunia.com/advisories/43488", "source": "psirt@cisco.com"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}, {"url": "http://www.securitytracker.com/id?1025108", "source": "psirt@cisco.com"}, {"url": "http://www.vupen.com/english/advisories/2011/0493", "source": "psirt@cisco.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65591", "source": "psirt@cisco.com"}, {"url": "http://secunia.com/advisories/43488", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1025108", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2011/0493", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65591", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352."}, {"lang": "es", "value": "Dispositivos de la serie Cisco Adaptive Security Appliances (ASA) 5500 con el software v8.0 anterior a v8.0 (5.23), v8.1 anterior a v8.1 (2.49), v8.2 anterior a v8.2 (4.1), y v8.3 anterior a v8.3 (2.13), cuando una entidad emisora de certificados (CA) est\u00e1 configurada, permite a atacantes remotos leer archivos arbitrarios a trav\u00e9s de vectores no especificados, tambi\u00e9n conocido como error ID CSCtk12352"}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81B53285-7486-47E0-8447-44ECA57A392C"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(3\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0D62E55-845B-49DD-93AA-9D8E7B755F8E"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33E6756C-407E-4236-85A1-953F9FF6799A"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(5\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "825E3056-F420-476D-957E-A22B164BD0F0"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.1\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC516FF2-7C0D-4F58-B61B-34FE7294DC1B"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.1\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDD95F2F-1C0E-4673-AE36-1BAF40EC7CC0"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A904D03-264C-4B01-B2B6-12455106B37D"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.2\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74826084-14BB-47C4-9EE3-56C3CF206724"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.2\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFA73BA5-D1C5-4561-86F1-5B37C64374E1"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDEA2295-5B38-45BC-9099-5A448482FB59"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31BA0ED9-6962-4E19-89A1-1724AADEC669"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:asa_5500:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FCBA3A3-7C8F-481A-9BEC-78981547F8BE"}, {"criteria": "cpe:2.3:h:cisco:asa_5505:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46FB0E87-E81A-4DF8-8A01-0D0727949D87"}, {"criteria": "cpe:2.3:h:cisco:asa_5510:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCFC8F36-ABFD-429F-AC2C-60BB481EECB9"}, {"criteria": "cpe:2.3:h:cisco:asa_5520:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BBFC985-514D-477B-B881-BB8ABEDFA59B"}, {"criteria": "cpe:2.3:h:cisco:asa_5540:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "193CF237-BBE5-4016-8167-24808FA52CBD"}, {"criteria": "cpe:2.3:h:cisco:asa_5550:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "427C9F27-ACE4-416B-9723-2AEECF9AB9CF"}, {"criteria": "cpe:2.3:h:cisco:asa_5580:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A5F5BF0-E96E-4FD3-B210-1E0F96AF4249"}, {"criteria": "cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2706D3BA-37A2-4D71-94DD-5386F5C94374"}, {"criteria": "cpe:2.3:h:cisco:pix_501:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01B0A1E7-F882-4FD8-811A-3D6D0A9FC938"}, {"criteria": "cpe:2.3:h:cisco:pix_506e:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F353E8D-FE19-4683-BD35-FFBF503C45DE"}, {"criteria": "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"}, {"criteria": "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6EE5C14-F556-48A5-BB3F-5465DC823B85"}, {"criteria": "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32E437F4-1B19-4B57-9EAD-3AC04717E389"}, {"criteria": "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29B2019F-DF6E-4924-B0D2-37094B5265F9"}, {"criteria": "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@cisco.com"}

7.8 /10