Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities
BID:33608
Info
Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities
| Bugtraq ID: | 33608 |
| Class: | Unknown |
| CVE: |
CVE-2009-0058 CVE-2009-0059 CVE-2009-0061 CVE-2009-0062 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2009 12:00AM |
| Updated: | Mar 11 2009 10:06PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Cisco Wireless LAN Control 5.1 Cisco Wireless LAN Control 5.0 Cisco Wireless LAN Control 4.2.173.0 Cisco Wireless LAN Control 4.2 Cisco Wireless LAN Control 4.1 Cisco Catalyst 7600 Series Wireless Services Module 0 Cisco Catalyst 6500 Series Wireless Services Module 0 Cisco Catalyst 3750 Series Integrated Wireless LAN Cont 0 Cisco 4400 Wireless LAN Controller (WLC) 0 |
| Not Vulnerable: | |
Discussion
Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities
Multiple Cisco Wireless LAN Controllers are prone to these remote vulnerabilities:
- Multiple denial-of-service vulnerabilities
- A remote privilege-escalation vulnerability
Remote attackers can exploit these issues to gain administrative rights on an affected device or crash the device, denying service to legitimate users.
The following devices are affected:
Cisco 4400 Series Wireless LAN Controllers
Cisco Catalyst 6500 Series/7600 Series Wireless Services Module (WiSM)
Cisco Catalyst 3750 Series Integrated Wireless LAN Controllers
Multiple Cisco Wireless LAN Controllers are prone to these remote vulnerabilities:
- Multiple denial-of-service vulnerabilities
- A remote privilege-escalation vulnerability
Remote attackers can exploit these issues to gain administrative rights on an affected device or crash the device, denying service to legitimate users.
The following devices are affected:
Cisco 4400 Series Wireless LAN Controllers
Cisco Catalyst 6500 Series/7600 Series Wireless Services Module (WiSM)
Cisco Catalyst 3750 Series Integrated Wireless LAN Controllers
Exploit / POC
Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities
An attacker can exploit these issues by using standard network utilities.
An attacker can exploit these issues by using standard network utilities.
Solution / Fix
Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities
Solution:
The vendor released an advisory and fixes to address these issues. Please see the referenced advisory for details.
Solution:
The vendor released an advisory and fixes to address these issues. Please see the referenced advisory for details.
References
Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities
References:
References:
- Cisco Wireless LAN Controller Home Page (Cisco )
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controll (Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controll (Cisco)