Cisco IOS AIC HTTP Transit Packet Remote Denial of Service Vulnerability

Bugtraq ID:	31354
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-3812
Remote:	Yes
Local:	No
Published:	Sep 24 2008 12:00AM
Updated:	Apr 29 2009 10:56PM
Credit:	The vulnerability was announced by Cisco.
Vulnerable:	Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XE Cisco IOS 12.4(4)T
Not Vulnerable:	Cisco IOS 12.4(9)T7 Cisco IOS 12.4(15)T7 Cisco IOS 12.4(15)T Cisco IOS 12.4(11)XW9 Cisco IOS 12.4(11)XW1 Cisco IOS 12.4(11)T4

Cisco IOS AIC HTTP Transit Packet Remote Denial of Service Vulnerability

Cisco IOS when configured for IOS firewall AIC (Application Inspection Control) with an HTTP application-specific policy is prone to a denial-of-service vulnerability.

A successful exploit may cause affected devices to reload, denying service to legitimate users.

Cisco IOS AIC HTTP Transit Packet Remote Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Cisco IOS AIC HTTP Transit Packet Remote Denial of Service Vulnerability

Solution:
Cisco has released an advisory. Please see the references for details.

Cisco IOS AIC HTTP Transit Packet Remote Denial of Service Vulnerability

References:

• Cisco IOS Homepage (Cisco Systems)
  
• Cisco Security Advisory: Cisco IOS Software Firewall Application Inspection Cont (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco IOS Software Firewall Application Inspection Cont (Cisco)