CVE-2007-0968

Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.

• http://secunia.com/advisories/24172Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/22561
• http://www.securitytracker.com/id?1017650
• http://www.vupen.com/english/advisories/2007/0609
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32521
• http://secunia.com/advisories/24172Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/22561
• http://www.securitytracker.com/id?1017650
• http://www.vupen.com/english/advisories/2007/0609
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32521

Published

Feb 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0962Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 be…
• CVE-2007-0963Unspecified vulnerability in Cisco Firewall Services Module …
• CVE-2007-0964Cisco FWSM 3.x before 3.1(3.18), when authentication is conf…
• CVE-2007-0965Cisco FWSM 3.x before 3.1(3.2), when authentication is confi…
• CVE-2007-0966Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.11), …
• CVE-2007-0967Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.1) al…
• CVE-2007-0969Multiple cross-site scripting (XSS) vulnerabilities in WebTe…
• CVE-2007-0970Multiple SQL injection vulnerabilities in WebTester 5.0.2006…
• CVE-2007-0971Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 …
• CVE-2007-0972Unrestricted file upload vulnerability in modules/emoticons.…
• CVE-2007-0973Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2007-0974Multiple unspecified vulnerabilities in Ian Bezanson DropBox…