CVE-2005-3788

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-24 · updated 2026-06-16

Description

Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed ARP responses from an IP address of an active firewall, which prevents the standby firewall from becoming active, aka "failover denial of service."

Affected products

Cisco ASA Software: 7.0(0), 7.0(2), 7.0(4)

References

http://marc.info/?l=bugtraq&m=113199814008230&w=2
http://marc.info/?l=bugtraq&m=113201784415859&w=2
http://secunia.com/advisories/17550/
http://securityreason.com/securityalert/178
http://securitytracker.com/id?1015205
http://www.securityfocus.com/bid/15407
https://exchange.xforce.ibmcloud.com/vulnerabilities/23160
http://marc.info/?l=bugtraq&m=113199814008230&w=2
http://marc.info/?l=bugtraq&m=113201784415859&w=2
http://secunia.com/advisories/17550/
http://securityreason.com/securityalert/178
http://securitytracker.com/id?1015205

Get alerted when CVE-2005-3788 or the next vulnerability affects your stack