CVEvulnerability
CVE-2007-0968
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.
Affected configurations
• cisco firewall services module 2.3
• cisco firewall services module 3.1
References
- http://secunia.com/advisories/24172 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22561 www.securityfocus.com
- http://www.securitytracker.com/id?1017650 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0609 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32521 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/24172 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22561 www.securityfocus.com
- http://www.securitytracker.com/id?1017650 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0609 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32521 exchange.xforce.ibmcloud.com