| Title |
Cisco SSL/TLS Certificate and SSH Public Key Validation Vulnerability |
| Published |
2007-01-18-12:00AM |
| Updated |
2007-01-18-08:10PM |
| Class |
Design Error |
| CVE |
|
| Remote |
Yes |
| Local |
No |
| Credit |
Jan Bervar of NIL Data Communications is credited with the discovery of this vulnerability. |
| Vulnerable |
Nortel Networks Contivity 2000 VPN Switch 4.1.3
Nortel Networks Contivity 2000 VPN Switch 4.1.2
Nortel Networks Contivity 2000 VPN Switch 4.1
Cisco CSMARS 4.2.2
Cisco CSMARS 4.2.1
Cisco CSMARS 4.1.5
Cisco ASDM 5.0 |
| Not Vulnerable |
Cisco CS-MARS 4.2.3
Cisco ASDM 5.2 |
| Code |
To exploit this issue, attackers require access to a network using the vulnerable applications.
|
| TXT |
 |