A vulnerability has been reported in Cisco ASA and PIX appliances, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error, which can be exploited to bypass the VPN authentication in Cisco ASA or Cisco PIX security appliances.

Successful exploitation requires that the device is configured for IPSec or SSL-based remote access VPN using Microsoft Windows NT Domain authentication.

Solution
Update to fixed versions (please see the vendor's advisory for details).

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sa-20081022-asa.shtml

Deep Links
Links available in Customer Area