CVE:CVE-2011-0396
CNNVD:CNNVD-201102-365
Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。FWSM是防火墙服务模块。
当Certificate Authority（CA）配置时，带有软件8.0(5.23)之前的8.0版本，8.1(2.49)之前的8.1版本，8.2(4.1)之前的8.2版本，以及8.3(2.13)之前的8.3版本的Cisco Adaptive Security Appliances（ASA）5500系列设备中存在权限许可和访问控制漏洞。远程攻击者可以借助未明向量读取任意文件。
solution:Upgrade cisco adaptive_security_appliance to a higher version than 8.0(2,8.0(3,8.0(4,8.0(5,8.1(1,8.1(2,8.2,8.2(1,8.2(2,8.3,and avoid the version 8.0(2),8.0(3),8.0(4),8.0(5),8.1(1),8.1(2),8.2,8.2(1),8.2(2),8.3; Upgrade cisco adaptive_security_appliance_software to a higher version than 8.0,8.3(1,and avoid the version 8.0,8.3(1); Upgrade cisco asa_5500 to a higher version than *; Upgrade cisco asa_5505 to a higher version than *; Upgrade cisco asa_5510 to a higher version than *; Upgrade cisco asa_5520 to a higher version than *; Upgrade cisco asa_5540 to a higher version than *; Upgrade cisco asa_5550 to a higher version than *; Upgrade cisco asa_5580 to a higher version than *; Upgrade cisco pix_500 to a higher version than *; Upgrade cisco pix_501 to a higher version than *; Upgrade cisco pix_506e to a higher version than *; Upgrade cisco pix_firewall_506 to a higher version than *; Upgrade cisco pix_firewall_515 to a higher version than *; Upgrade cisco pix_firewall_520 to a higher version than *; Upgrade cisco pix_firewall_525 to a higher version than *; Upgrade cisco pix_firewall_535 to a higher version than *