Technical Description

A vulnerability has been identified in Cisco Security Monitoring, Analysis and Response System (CS-MARS) and Cisco Adaptive Security Device Manager (ASDM), which could be exploited by attackers to bypass security restrictions. This issue is due to a lack of validation of Secure Sockets Layer (SSL)/Transport Layer Security (TLS) certificates or Secure Shell (SSH) public keys presented by certain devices configured to connect to CS-MARS or ASDM, which could be exploited by attackers to impersonate a device that an affected product connects to, which could then be used to obtain sensitive information (e.g. login credentials) or submit false data to a vulnerable product.

Affected Products

Cisco Security Monitoring Analysis and Response System (CS-MARS) versions prior to 4.2.3
Cisco Adaptive Security Device Manager (ASDM) versions prior to 5.2(2.54)

Solution

Upgrade to CS-MARS version 4.2.3 (2403) :
http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-mars?psrtdcat20e2

Upgrade to ASDM version version 5.2(2.54) :
http://www.cisco.com/pcgi-bin/tablebuild.pl/asa-interim?psrtdcat20e2

References

http://www.vupen.com/english/advisories/2007/0245
http://www.cisco.com/warp/public/707/cisco-sa-20070118-certs.shtml

Credits

Vulnerability reported by Jan Bervar (NIL Data Communications)

ChangeLog

2007-01-19 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.