Cisco Video Surveillance Stream Manager Firmware Denial of Service Vulnerability

Bugtraq ID:	35479
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-2045
Remote:	Yes
Local:	No
Published:	Jun 24 2009 12:00AM
Updated:	Jun 26 2009 12:49AM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Cisco Video Surveillance Stream Manager 0 Cisco Video Surveillance Services Platform 5.2 Cisco Video Surveillance Integrated Services Platform 5.2
Not Vulnerable:	Cisco Video Surveillance Services Platform 5.3 Cisco Video Surveillance Integrated Services Platform 5.3

Cisco Video Surveillance Stream Manager Firmware Denial of Service Vulnerability

Cisco Video Surveillance Stream Manager firmware is prone to a denial-of-service vulnerability when handling specially crafted UDP packets.

An attacker can exploit this issue to trigger an affected device to reboot, causing denial-of-service conditions.

This issue is documented by Cisco Bug ID CSCsj47924.

This issue affects Video Surveillance Stream Manager firmware running on versions prior to Video Surveillance Services Platform 5.3 and Video Surveillance Integrated Services Platform 5.3.

Cisco Video Surveillance Stream Manager Firmware Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Cisco Video Surveillance Stream Manager Firmware Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco Video Surveillance Stream Manager Firmware Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)