CVE-2007-4786

Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.

• CWE-319
• CWE-319

• http://osvdb.org/37499Broken Link
• http://secunia.com/advisories/26677Broken Link, Third Party Advisory
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903Broken Link, Vendor Advisory
• http://www.kb.cert.org/vuls/id/563673Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/MIMG-74ZK93Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/25548Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1018660Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/3076Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36473Third Party Advisory, VDB Entry
• http://osvdb.org/37499Broken Link
• http://secunia.com/advisories/26677Broken Link, Third Party Advisory
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903Broken Link, Vendor Advisory
• http://www.kb.cert.org/vuls/id/563673Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/MIMG-74ZK93Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/25548Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1018660Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/3076Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36473Third Party Advisory, VDB Entry

Published

Sep 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4780Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers…
• CVE-2007-4781administrator/index.php in the installer component (com_inst…
• CVE-2007-4782PHP before 5.2.3 allows context-dependent attackers to cause…
• CVE-2007-4783The iconv_substr function in PHP 5.2.4 and earlier allows co…
• CVE-2007-4784The setlocale function in PHP before 5.2.4 allows context-de…
• CVE-2007-4785Sony Micro Vault Fingerprint Access Software, as distributed…
• CVE-2007-4787The virus detection engine in Sophos Anti-Virus before 2.49.…
• CVE-2007-4788Cisco Content Switching Modules (CSM) 4.2 before 4.2.3a, and…
• CVE-2007-4789Cisco Content Switching Modules (CSM) 4.2 before 4.2.7, and …
• CVE-2007-4790Stack-based buffer overflow in certain ActiveX controls in (…
• CVE-2007-4791Buffer overflow in the swcons command in bos.rte.console in …
• CVE-2007-4792Buffer overflow in ibstat in devices.common.IBM.ib.rte in IB…