CVE-2007-5571

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/27236Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtmlVendor Advisory
http://www.securityfocus.com/bid/26109Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018825Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3530Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/37258Third Party Advisory, VDB Entry
http://secunia.com/advisories/27236Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtmlVendor Advisory
http://www.securityfocus.com/bid/26109Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018825Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3530Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/37258Third Party Advisory, VDB Entry

Timeline

Published: Oct 18, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-55724.3Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete acti CVE-2007-55736.8PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbi CVE-2007-55746.8PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the pa CVE-2007-55754.3Cross-site request forgery (CSRF) vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demo CVE-2007-55766.8BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows phy CVE-2007-55774.3Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web sc CVE-2007-55787.5Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers CVE-2007-55797.5login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowle CVE-2007-558010.0Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 befo CVE-2007-55814.3Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow rem CVE-2007-55824.3Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks CVE-2007-55837.8Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot)