Gavin Jones has reported a weakness in Cisco ASA (Adaptive Security Appliance) 5500 Series, which can be exploited by malicious people to gain knowledge of certain information.

The problem is that the device returns different responses depending on whether or not a valid group name is supplied via a dead peer detection VID when the device is configured for group name authentication and using a pre-shared key.

This is related to:
SA15765

Solution
Update to a fixed version when it becomes available. Please see the vendor's advisory for more details.

Provided and/or discovered by
Gavin Jones, NGS Secure.

Changelog
Further details available in Customer Area

Original Advisory
Cisco:
http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html

NGS Secure:
http://archives.neohapsis.com/archives/bugtraq/2010-12/0012.html
http://archives.neohapsis.com/archives/bugtraq/2011-03/0205.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area