Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the Details section of this security advisory.

N/A

输入验证不恰当

Cisco Adaptive Security Appliance Software 输入验证错误漏洞

Cisco Adaptive Security Appliances Software（ASA Software）是美国思科（Cisco）公司的一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco ASA Software中的smart tunnel功能存在输入验证错误漏洞。本地攻击者通过创建恶意的系统文件并写入到文件系统中利用该漏洞覆盖系统文件并执行恶意的二进制文件。

N/A

N/A