Cisco Session Border Controller (SBC) Remote Denial Of Service Vulnerability

Bugtraq ID:	33975
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0619
Remote:	Yes
Local:	No
Published:	Mar 04 2009 12:00AM
Updated:	Mar 04 2009 06:16PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Cisco Session Border Controller (SBC) 3.0(1)
Not Vulnerable:	Cisco Session Border Controller (SBC) 3.0(2)

Cisco Session Border Controller (SBC) Remote Denial Of Service Vulnerability

Cisco Session Border Controller (SBC) is prone to a remote denial-of-service vulnerability when handling specially crafted TCP packets.

A remote attacker may exploit this issue to cause the affected device to reload. Repeated attacks can result in a denial-of-service condition.

This issue is documented in Cisco Bug ID CSCsq18958.

Versions prior to Cisco SBC software 3.0(2) are vulnerable. This issue affects SBC for Cisco 7600 series routers.

Cisco Session Border Controller (SBC) Remote Denial Of Service Vulnerability

Attackers may exploit this issue via readily available tools.

Cisco Session Border Controller (SBC) Remote Denial Of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

Cisco Session Border Controller (SBC) Remote Denial Of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Cisco 7600 Series Router Session Border Controller Deni (Cisco Systems Product Security Incident Response Team )
  
• cisco-sa-20090304-sbc Cisco Security Advisory: Cisco 7600 Series Router Session (Cisco)