Description
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securitytracker.com/id/1029575 ↗
- http://secunia.com/advisories/56366 ↗
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0655 ↗
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32362 ↗
- http://www.securityfocus.com/bid/64700 ↗
- http://osvdb.org/101838 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90164 ↗