CVE-2006-3894

Related Files

Cisco Security Advisory 20070522-crypto

Posted May 23, 2007

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - A vulnerability has been discovered in a third party cryptographic library which is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One (ASN.1) object is parsed. Due to the nature of the vulnerability it may be possible, in some cases, to trigger this vulnerability without a valid certificate or valid application-layer credentials (such as a valid username or password). Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS). However, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.

tags | advisory, vulnerability

systems | cisco

advisories | CVE-2006-3894

SHA-256 | 6e95cac97dd31c0672d924b0560b7cefdfee1c459633660ce49287159ace5b7f

Download | Favorite | View