Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.

Want some help finding the Cisco products that fit your needs? You're in the right place. If you want troubleshooting help, documentation, other support, or downloads, visit our technical support area.

**Products by technology**

**Networking**

*   Switches
*   Routers
*   Wireless
*   Software-defined networking
*   Cisco Silicon One
*   Cloud and network management
*   Interfaces and modules
*   Optical networking

*   See all Networking

*   See all Wireless and Mobility

*   See all Security

*   See all Collaboration

**Data Center**

*   Servers: Cisco Unified Computing System
*   Cloud Networking
*   Security
*   Switches
*   Hyperconverged infrastructure
*   Storage networking

*   See all Data Center

*   See all Video

*   See all IoT

**Software**

*   Cisco+ (as-a-service)
*   Cisco Nexus Dashboard
*   Cisco Networking Software
*   Cisco DNA Software for Wireless
*   Cisco DNA Software for Switching
*   Cisco DNA Software for SD-WAN and Routing
*   Cisco Intersight for Compute and Cloud
*   Cisco ONE for Data Center Compute and Cloud

*   See all Software

*   Product index

**Products by business type**

**Solutions**

Cisco can provide your organization with solutions for everything from networking and data center to collaboration and security. Find the options best suited to your business needs.

*   By technology
*   By industry

*   See all solutions

**Services from Cisco Customer Experience**

**Advisory services**

Get expert advisory services with data-driven insights to architect and optimize your IT environment.

**Solution Support**

Experts provide centralized support across your multiproduct, multivendor Cisco solution environment.

**Hardware support**

Get expert technical support guided by insights from solving millions of cases worldwide.

**Software Support**

Unlock the full benefits of your Cisco software, both on-premises and in the cloud.

**Packaged services**

Our services package provides expertise, insights, learning, and support via our CX Cloud digital platform.

**Managed services**

Have our experts directly manage your IT operations for you to accelerate your time to value.

**Learning services**

Training and certifications can enhance your skills and empower your workforce for the future.

*   View all Cisco Services

**End-of-sale and end-of-life**

**Tools**

**Resources**

*   Local Resellers
*   Technical Support
*   Demos

CVE-2007-2462: Products, Solutions, and Services

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

Tag

#ldap