Vulnerability-Lookup

CVE-2007-2462 (GCVE-0-2007-2462)

Vulnerability from cvelistv5 – Published: 2007-05-02 22:00 – Updated: 2024-08-07 13:42

Summary

Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

9 references

URL	Tags
http://www.securitytracker.com/id?1017994	vdb-entryx_refsource_SECTRACK
http://www.cisco.com/en/US/products/products_secu…	vendor-advisoryx_refsource_CISCO
http://www.kb.cert.org/vuls/id/210876	third-party-advisoryx_refsource_CERT-VN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2007/1636	vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1017995	vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/35331	vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/23768	vdb-entryx_refsource_BID
http://secunia.com/advisories/25109	third-party-advisoryx_refsource_SECUNIA

Date Public

2007-05-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:42:32.339Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1017994",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017994"
          },
          {
            "name": "20070502 LDAP and VPN Vulnerabilities in PIX and ASA Appliances",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
          },
          {
            "name": "VU#210876",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/210876"
          },
          {
            "name": "cisco-asa-ldap-authentication-bypass(34020)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
          },
          {
            "name": "ADV-2007-1636",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1636"
          },
          {
            "name": "1017995",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017995"
          },
          {
            "name": "35331",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/35331"
          },
          {
            "name": "23768",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23768"
          },
          {
            "name": "25109",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25109"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-05-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1017994",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017994"
        },
        {
          "name": "20070502 LDAP and VPN Vulnerabilities in PIX and ASA Appliances",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
        },
        {
          "name": "VU#210876",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/210876"
        },
        {
          "name": "cisco-asa-ldap-authentication-bypass(34020)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
        },
        {
          "name": "ADV-2007-1636",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1636"
        },
        {
          "name": "1017995",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017995"
        },
        {
          "name": "35331",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/35331"
        },
        {
          "name": "23768",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23768"
        },
        {
          "name": "25109",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25109"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2462",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1017994",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017994"
            },
            {
              "name": "20070502 LDAP and VPN Vulnerabilities in PIX and ASA Appliances",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
            },
            {
              "name": "VU#210876",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/210876"
            },
            {
              "name": "cisco-asa-ldap-authentication-bypass(34020)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
            },
            {
              "name": "ADV-2007-1636",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1636"
            },
            {
              "name": "1017995",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017995"
            },
            {
              "name": "35331",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/35331"
            },
            {
              "name": "23768",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23768"
            },
            {
              "name": "25109",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25109"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-2462",
    "datePublished": "2007-05-02T22:00:00.000Z",
    "dateReserved": "2007-05-02T00:00:00.000Z",
    "dateUpdated": "2024-08-07T13:42:32.339Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-2462",
      "date": "2026-10-16",
      "epss": "0.06451",
      "percentile": "0.93646"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cve@mitre.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:cisco:pix:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "36B51668-5055-4B10-9E0F-D25C470C9A80",
                    "versionEndIncluding": "7.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4991BC7-B07D-4D8C-885C-136AD9D4E209",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "051F79C8-3058-4926-A533-73F5A269599E",
                    "versionEndIncluding": "7.2.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5E623855-FB2B-4B8A-85E8-B8DC29A3FBB0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad no especificada en Cisco Adaptive Security Appliance (ASA) y PIX 7.2 before 7.2(2)8, cuando utilizan Layer 2 Tunneling Protocol (L2TP) o Remote Management Access, permite a atacantes remotos evitar la validaci\u00f3n LDAP y ganar privilegios a trav\u00e9s de vectores desconocidos."
          }
        ],
        "evaluatorSolution": "The vendor has addressed this issue with the following update:\r\nhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml",
        "id": "CVE-2007-2462",
        "lastModified": "2026-06-16T22:39:39.387",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 10.0,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-05-02T22:19:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/25109"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/210876"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/35331"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/23768"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1017994"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1017995"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2007/1636"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/25109"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/210876"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/35331"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/23768"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1017994"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1017995"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/1636"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2007-AVI-198

Vulnerability from certfr_avis - Published: 2007-05-03 - Updated: 2007-05-03

Plusieurs vulnérabilités ont été identifiées dans les produits Cisco ASA et PIX. L'exploitation de celles-ci permettent à un utilisateur distant de contourner la politique de sécurité, ou de perturber le fonctionnement du système vulnérable.

Description

Plusieurs vulnérabilités ont été identifiées dans les produits Cisco ASA et PIX. Parmi celles-ci :

dans le contexte d'un tunnel L2TP, il serait possible de contourner le processus d'authentification LDAP, lorsque le protocole utilisé n'est pas PAP (Password Authentication Protocol), mais CHAP, MS-CHAPv1 ou MS-CHAPv2 par exemple ;
la vulnérabilité précédente serait également applicable au cours de la phase d'authentification des sessions d'administration (telnet, SSH ou HTTP) ;
la gestion de la date d'expiration des mots de passe ne serait pas correctement prise en compte au cours de la fermeture d'une connexion distante VPN IPSec ;
une situation de compétition (ou race condition) existerait dans la manipulation de sessions SSL particulières par Cisco ASA. Cette vulnérabilité peut provoquer le redémarrage du système.
DHCP est un protocole permettant de fournir automatiquement des éléments de configuration aux machines du réseau (adresse IP, masque de réseau, adresse de la passerelle par défaut, adresse du serveur DNS, etc.). ASA et PIX offrent la possibilité d'utiliser le système comme agent de liaison DHCP vers les serveurs DHCP du réseau. Les paquets de type DHCPREQUEST ou DHCPINFORM provoquent des réponses de la forme DHCPACK de la part des serveurs DHCP. Les agents de relais Cisco ne parviendraient pas à stocker toutes les informations concernant ces échanges, et bloqueraient des paquets. Cette vulnérabilité peut donc être utilisée par une personne malveillante pour empêcher l'agent de relais de transférer les paquets légitimes.

Solution

Se référer au bulletin de sécurité de Cisco pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Cisco	N/A	Cisco PIX, pour les versions logicielles 7.1 et 7.2 antérieures à 7.1(2)49 et 7.2(2)19.
	Cisco	Adaptive Security Appliance	Cisco ASA (Adaptive Security Appliance), pour les versions logicielles 7.1 et 7.2 antérieures à 7.1(2)49 et 7.2(2)19 ;

References

Title

Publication Time

EUVD-2026-134389

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 06:34

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T06:34:22.673110+00:00",
  "id": "EUVD-2026-134389"
}

FKIE_CVE-2007-2462

Vulnerability from fkie_nvd - Published: 2007-05-02 22:19 - Updated: 2026-06-16 22:39

Severity

Summary

References

URL	Tags
cve@mitre.org	http://secunia.com/advisories/25109
cve@mitre.org	http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml	Patch
cve@mitre.org	http://www.kb.cert.org/vuls/id/210876	US Government Resource
cve@mitre.org	http://www.osvdb.org/35331
cve@mitre.org	http://www.securityfocus.com/bid/23768
cve@mitre.org	http://www.securitytracker.com/id?1017994
cve@mitre.org	http://www.securitytracker.com/id?1017995
cve@mitre.org	http://www.vupen.com/english/advisories/2007/1636
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/34020
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/25109
af854a3a-2127-422b-91ae-364da2661108	http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/210876	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/35331
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/23768
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1017994
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1017995
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/1636
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/34020

Impacted products

Vendor	Product	Version
cisco	pix	*
cisco	pix	7.1
cisco	adaptive_security_appliance_software	*
cisco	adaptive_security_appliance_software	7.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:pix:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "36B51668-5055-4B10-9E0F-D25C470C9A80",
              "versionEndIncluding": "7.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4991BC7-B07D-4D8C-885C-136AD9D4E209",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "051F79C8-3058-4926-A533-73F5A269599E",
              "versionEndIncluding": "7.2.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E623855-FB2B-4B8A-85E8-B8DC29A3FBB0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Cisco Adaptive Security Appliance (ASA) y PIX 7.2 before 7.2(2)8, cuando utilizan Layer 2 Tunneling Protocol (L2TP) o Remote Management Access, permite a atacantes remotos evitar la validaci\u00f3n LDAP y ganar privilegios a trav\u00e9s de vectores desconocidos."
    }
  ],
  "evaluatorSolution": "The vendor has addressed this issue with the following update:\r\nhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml",
  "id": "CVE-2007-2462",
  "lastModified": "2026-06-16T22:39:39.387",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-05-02T22:19:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25109"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/210876"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/35331"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/23768"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1017994"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1017995"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/1636"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25109"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/210876"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/35331"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/23768"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017994"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017995"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1636"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-4R3R-6X3M-VW6J

Vulnerability from github – Published: 2022-05-01 18:03 – Updated: 2022-05-01 18:03

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-2462"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-05-02T22:19:00Z",
    "severity": "HIGH"
  },
  "details": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.",
  "id": "GHSA-4r3r-6x3m-vw6j",
  "modified": "2022-05-01T18:03:55Z",
  "published": "2022-05-01T18:03:55Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2462"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25109"
    },
    {
      "type": "WEB",
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/210876"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/35331"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/23768"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1017994"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1017995"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1636"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-2462

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-2462

Aliases

CVE-2007-2462

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-2462",
    "description": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.",
    "id": "GSD-2007-2462"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-2462"
      ],
      "details": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.",
      "id": "GSD-2007-2462",
      "modified": "2023-12-13T01:21:37.422287Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-2462",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1017994",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1017994"
          },
          {
            "name": "20070502 LDAP and VPN Vulnerabilities in PIX and ASA Appliances",
            "refsource": "CISCO",
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
          },
          {
            "name": "VU#210876",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/210876"
          },
          {
            "name": "cisco-asa-ldap-authentication-bypass(34020)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
          },
          {
            "name": "ADV-2007-1636",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1636"
          },
          {
            "name": "1017995",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1017995"
          },
          {
            "name": "35331",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/35331"
          },
          {
            "name": "23768",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/23768"
          },
          {
            "name": "25109",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25109"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:h:cisco:pix:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "7.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "7.2.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2462"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070502 LDAP and VPN Vulnerabilities in PIX and ASA Appliances",
              "refsource": "CISCO",
              "tags": [
                "Patch"
              ],
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml"
            },
            {
              "name": "VU#210876",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/210876"
            },
            {
              "name": "23768",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/23768"
            },
            {
              "name": "1017994",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1017994"
            },
            {
              "name": "1017995",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1017995"
            },
            {
              "name": "25109",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25109"
            },
            {
              "name": "35331",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/35331"
            },
            {
              "name": "ADV-2007-1636",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1636"
            },
            {
              "name": "cisco-asa-ldap-authentication-bypass(34020)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34020"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-08-11T19:02Z",
      "publishedDate": "2007-05-02T22:19Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-2462 (GCVE-0-2007-2462)

CERTA-2007-AVI-198

Description

Solution

EUVD-2026-134389

FKIE_CVE-2007-2462

GHSA-4R3R-6X3M-VW6J

GSD-2007-2462

Tags

Sightings

Nomenclature

Related by attack behaviour