Vulnerability Details CVE-2005-3788
Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.2%
CVSS Severity
CVSS v2 Score 5.4
References
- http://marc.info/?l=bugtraq&m=113199814008230&w=2
- http://marc.info/?l=bugtraq&m=113201784415859&w=2
- http://secunia.com/advisories/17550/
- http://securityreason.com/securityalert/178
- http://securitytracker.com/id?1015205
- http://www.securityfocus.com/bid/15407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
- http://marc.info/?l=bugtraq&m=113199814008230&w=2
- http://marc.info/?l=bugtraq&m=113201784415859&w=2
- http://secunia.com/advisories/17550/
- http://securityreason.com/securityalert/178
- http://securitytracker.com/id?1015205
- http://www.securityfocus.com/bid/15407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
Products affected by CVE-2005-3788
-
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0(0)
-
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0(2)
-
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0(4)