CVE-2005-3788

medium

Description

Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23160

http://www.securityfocus.com/bid/15407

http://securitytracker.com/id?1015205

http://securityreason.com/securityalert/178

http://secunia.com/advisories/17550/

http://marc.info/?l=bugtraq&m=113201784415859&w=2

http://marc.info/?l=bugtraq&m=113199814008230&w=2

Details

Source: Mitre, NVD

Published: 2005-11-24

Updated: 2023-08-11

Risk Information

CVSS v2

Base Score: 5.4

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: Medium