CVE-2009-1202

Description

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.

References

http://www.vupen.com/english/advisories/2009/1713

http://www.securitytracker.com/id?1022457

http://www.securityfocus.com/bid/35480

http://www.securityfocus.com/archive/1/504516/100/0/threaded

http://secunia.com/advisories/35511

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS