SecuritySpace - CVE-2015-4458

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-4458

Description: The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance (ASA) Software 9.1(5.21) and other products, does not verify the MAC field, which allows man-in-the-middle attackers to spoof TLS content by modifying packets, aka Bug ID CSCuu52976.

Test IDs: 1.3.6.1.4.1.25623.1.0.805760

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-4458
Cisco Security Advisory: 20150714 Cisco Adaptive Security Appliance Message Authentication Code Checking Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=39919
http://www.securitytracker.com/id/1032927

CVE ID:	CVE-2015-4458
Description:	The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance (ASA) Software 9.1(5.21) and other products, does not verify the MAC field, which allows man-in-the-middle attackers to spoof TLS content by modifying packets, aka Bug ID CSCuu52976.
Test IDs:	1.3.6.1.4.1.25623.1.0.805760
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4458 Cisco Security Advisory: 20150714 Cisco Adaptive Security Appliance Message Authentication Code Checking Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=39919 http://www.securitytracker.com/id/1032927