Executive Summary

Informations
Name CVE-2016-6432 First vendor Publication 2016-10-27
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 8.1
Base Score 8.1 Environmental Score 8.1
impact SubScore 5.9 Temporal Score 8.1
Exploitabality Sub Score 2.2
 
Attack Vector Network Attack Complexity High
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could exploit this vulnerability by sending a crafted NetBIOS packet in response to a NetBIOS probe sent by the ASA software. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or cause a reload of the affected system. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode. This vulnerability can be triggered by IPv4 traffic.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6432

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 130

Snort® IPS/IDS

Date Description
2016-10-20 Cisco ASA NBSTAT response stack buffer overflow attempt
RuleID : 40499 - Revision : 1 - Type : SERVER-OTHER

Sources (Detail)

http://www.securityfocus.com/bid/93784
http://www.securitytracker.com/id/1037059
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
Date Informations
2024-11-28 12:58:05
  • Multiple Updates
2023-08-15 21:28:38
  • Multiple Updates
2023-08-12 05:28:54
  • Multiple Updates
2021-05-04 12:52:44
  • Multiple Updates
2021-04-22 02:04:53
  • Multiple Updates
2020-05-23 00:52:40
  • Multiple Updates
2018-10-31 00:21:11
  • Multiple Updates
2018-05-08 12:06:56
  • Multiple Updates
2017-07-29 12:05:21
  • Multiple Updates
2017-01-28 00:23:24
  • Multiple Updates
2016-12-23 12:32:16
  • Multiple Updates
2016-11-29 00:26:33
  • Multiple Updates
2016-10-31 17:24:12
  • Multiple Updates
2016-10-28 17:23:32
  • First insertion