Description
Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."
Affected products
- Cisco / adaptive_security_appliance_software7.0(0) – 7.0(0)
- Cisco / adaptive_security_appliance_software7.0(2) – 7.0(2)
- Cisco / adaptive_security_appliance_software7.0(4) – 7.0(4)
References
- MAILING_LISThttp://marc.info/?l=bugtraq&m=113201784415859&w=2
- VENDOR_ADVISORYhttp://secunia.com/advisories/17550/
- MISChttp://securitytracker.com/id?1015205
- MISChttp://www.securityfocus.com/bid/15407
- MAILING_LISThttp://marc.info/?l=bugtraq&m=113199814008230&w=2
- MISChttp://securityreason.com/securityalert/178
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/23160