Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2007-0968 | First vendor Publication | 2007-02-15 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:S/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0968 |
CAPEC : Common Attack Pattern Enumeration & Classification
| Id | Name |
|---|---|
| CAPEC-56 | Removing/short-circuiting 'guard logic' |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Hardware | 2 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 33061 | Cisco Firewall Services Module (FWSM) ACE Evaluation ACL Bypass Cisco Firewall Services Module (FWSM) contains a design flaw that may allow corruption of access-lists (ACL). The issue could be triggered by manipulating ACL's which uses object-groups. It is possible that the ACL becomes corrupted and ACE entries to not be elevated at all or out of order, resulting in blocking legitimate traffic and allowing traffic that is normally restricted. This vulnerability results in a loss of integrity and availability. |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:18:12 |
|
| 2024-11-28 12:11:34 |
|
| 2021-05-04 12:05:23 |
|
| 2021-04-22 01:05:57 |
|
| 2020-05-23 00:19:18 |
|
| 2017-07-29 12:02:02 |
|
| 2016-04-26 15:46:37 |
|
| 2013-05-11 10:19:25 |
|
