CVE:CVE-2013-6682
CNNVD:CNNVD-201311-145
Cisco Adaptive Security Appliances（ASA，自适应安全设备）Software是美国思科（Cisco）公司的一套运行于防火墙中的操作系统。
Cisco ASA中的phone proxy功能中存在安全绕过漏洞，该漏洞源于手机代理连接数据库没有正确处理不可信的证书。远程攻击者可通过提交特制的证书利用该漏洞插入无效的条目到手机代理连接数据库。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 9.0.3\(6\,7.0,7.0(0,7.0(1,7.0(2,7.0(4,7.0(5,7.0(5.2,7.0(6,7.0(6.7,7.0(7,7.0(8,7.0.1,7.0.1.4,7.0.2,7.0.4,7.0.4.3,7.0.5,7.0.6,7.0.7,7.0.8,7.0.8:interim,7.1,7.1(2,7.1(2.5,7.1(2.27,7.1(2.48,7.1(2.49,7.1(5,7.1.1,7.1.2,7.2,7.2(1,7.2(1.22,7.2(2,7.2(2.5,7.2(2.7,7.2(2.8,7.2(2.10,7.2(2.14,7.2(2.15,7.2(2.16,7.2(2.17,7.2(2.18,7.2(2.19,7.2(2.48,7.2(3,7.2(4,7.2(5,7.2.1,7.2.2,7.2.3,7.2.4,7.2.5,8.0,8.0(2,8.0(3,8.0(4,8.0(5,8.0(5.28,8.0(5.31,8.0.2,8.0.3,8.0.4,8.0.5,8.1,8.2,8.2(1,8.2(2,8.2(3,8.2(3.9,8.2(4,8.2(4.1,8.2(4.4,8.2(5,8.2(5.35,8.2(5.38,8.2.1,8.2.2,8.2.2:interim,8.2.3,8.3(1,8.3(2,8.3(2.34,8.3(2.37,8.3.1,8.3.1:interim,8.3.2,8.4,8.4(1,8.4(1.11,8.4(2,8.4(2.11,8.4(3,8.4(4.11,8.4(5,8.4(6,8.5,8.5(1,8.5(1.4,8.5(1.17,8.6,8.6(1,8.6(1.3,8.6(1.10,8.7,8.7(1.1,8.7(1.3,8.7.1,8.7.1.1,9.0,9.0(1,9.0(2,9.0(3,and avoid the version (,9.0.3\(6\)],7.0,7.0(0),7.0(1),7.0(2),7.0(4),7.0(5),7.0(5.2),7.0(6),7.0(6.7),7.0(7),7.0(8),7.0.1,7.0.1.4,7.0.2,7.0.4,7.0.4.3,7.0.5,7.0.6,7.0.7,7.0.8,7.0.8:interim,7.1,7.1(2),7.1(2.5),7.1(2.27),7.1(2.48),7.1(2.49),7.1(5),7.1.1,7.1.2,7.2,7.2(1),7.2(1.22),7.2(2),7.2(2.5),7.2(2.7),7.2(2.8),7.2(2.10),7.2(2.14),7.2(2.15),7.2(2.16),7.2(2.17),7.2(2.18),7.2(2.19),7.2(2.48),7.2(3),7.2(4),7.2(5),7.2.1,7.2.2,7.2.3,7.2.4,7.2.5,8.0,8.0(2),8.0(3),8.0(4),8.0(5),8.0(5.28),8.0(5.31),8.0.2,8.0.3,8.0.4,8.0.5,8.1,8.2,8.2(1),8.2(2),8.2(3),8.2(3.9),8.2(4),8.2(4.1),8.2(4.4),8.2(5),8.2(5.35),8.2(5.38),8.2.1,8.2.2,8.2.2:interim,8.2.3,8.3(1),8.3(2),8.3(2.34),8.3(2.37),8.3.1,8.3.1:interim,8.3.2,8.4,8.4(1),8.4(1.11),8.4(2),8.4(2.11),8.4(3),8.4(4.11),8.4(5),8.4(6),8.5,8.5(1),8.5(1.4),8.5(1.17),8.6,8.6(1),8.6(1.3),8.6(1.10),8.7,8.7(1.1),8.7(1.3),8.7.1,8.7.1.1,9.0,9.0(1),9.0(2),9.0(3)