CVE-2005-3788

Cisco Adaptive Security Appliance 7.0(0), 7.0(2), 7.0(4) - Denial of Service via Spoofed ARP Responses

Title source: llm

Description

Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."

References (7)

Core 7

Core References

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=113201784415859&w=2

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17550/

Vendor Advisory vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015205

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/15407

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=113199814008230&w=2

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/178

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/23160

Scores

EPSS 0.0178

EPSS Percentile 75.9%

Details

Status published

Products (3)

cisco/adaptive_security_appliance_software 7.0\(0\)

cisco/adaptive_security_appliance_software 7.0\(2\)

cisco/adaptive_security_appliance_software 7.0\(4\)

Published Nov 24, 2005

Tracked Since Feb 18, 2026