Cisco Adaptive Security Applicance Failover Testing Denial of Service Weakness

Bugtraq ID:	15407
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 14 2005 12:00AM
Updated:	Nov 14 2005 12:00AM
Credit:	Discovered by Amin Tora <[email protected]>.
Vulnerable:	Cisco Adaptive Security Appliance 7.0 (4) Cisco Adaptive Security Appliance 7.0 (2) Cisco Adaptive Security Appliance 7.0 (0)
Not Vulnerable:

Cisco Adaptive Security Applicance Failover Testing Denial of Service Weakness

Cisco Adaptive Security Appliances are prone to a weakness that may cause a denial of service condition in certain circumstances. This issue is due to insufficient validation of ARP responses.

This issue reportedly affects Cisco ASA devices running 7.0(0), 7.0(2), and 7.0(4). Other versions may also be affected.

Cisco Adaptive Security Applicance Failover Testing Denial of Service Weakness

An exploit is not required.

Cisco Adaptive Security Applicance Failover Testing Denial of Service Weakness

Solution:
Cisco has confirmed the existence of this issue and reports that a fix will be included in an upcoming software release. Please contact the vendor for further information about obtaining the upgraded software.

Cisco Adaptive Security Applicance Failover Testing Denial of Service Weakness

References:

• Cisco ASA 5500 Series Adaptive Security Appliances Homepage (Cisco)
  
• [ADVISORY] CISCO ASA Failover DoS Vulnerability ("Amin Tora" )