Cisco Physical Access Gateway Malformed Packet Remote Denial of Service Vulnerability

Bugtraq ID:	35477
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-1163
Remote:	Yes
Local:	No
Published:	Jun 24 2009 12:00AM
Updated:	Jun 26 2009 12:49AM
Credit:	Cisco
Vulnerable:	Cisco Physical Access Gateway 1.0
Not Vulnerable:	Cisco Physical Access Gateway 1.1

Cisco Physical Access Gateway Malformed Packet Remote Denial of Service Vulnerability

Cisco Physical Access Gateway is prone to a denial-of-service vulnerability when handling specially crafted TCP packets.

An attacker can exploit this issue to cause a memory leak, denying service to legitimate users.

This issue is documented by Cisco Bug ID CSCsu95864.

Cisco Physical Access Gateway Malformed Packet Remote Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Cisco Physical Access Gateway Malformed Packet Remote Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco Physical Access Gateway Malformed Packet Remote Denial of Service Vulnerability

References:

• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnera (Cisco)