Cisco Wide Area Application Services CIFS Remote Denial of Service Vulnerability

Bugtraq ID:	24956
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-3923
Remote:	Yes
Local:	No
Published:	Jul 18 2007 12:00AM
Updated:	May 07 2015 05:36PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Cisco Wide Area Application Services (WAAS) 4.0.9 Cisco Wide Area Application Services (WAAS) 4.0.7
Not Vulnerable:

Cisco Wide Area Application Services CIFS Remote Denial of Service Vulnerability

Cisco Wide Area Application Services software is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to cause a device running the affected software to stop processing all types of traffic, effectively denying service to legitimate users.

Cisco WAAS 4.0.7 and 4.0.9 are affected.

NOTE: Only devices configured with Edge Services are vulnerable to this issue.

Cisco Wide Area Application Services CIFS Remote Denial of Service Vulnerability

Attackers may use readily available network tools to trigger this issue.

Cisco Wide Area Application Services CIFS Remote Denial of Service Vulnerability

Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more
information.

Cisco Wide Area Application Services CIFS Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Denial of Service Vulnerability in Cisco Wide Area Appl (Cisco Systems Product Security Incident Response Team )
  
• Advisory ID: cisco-sa-20070718-waas (Cisco)