Cisco Firewall Services Module SCCP Inspection Remote Denial of Service Vulnerability

Bugtraq ID:	38274
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-0151
Remote:	Yes
Local:	No
Published:	Feb 17 2010 12:00AM
Updated:	Feb 17 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.0 (6) Cisco Firewall Services Module (FWSM) 4.0 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.0 (8) Cisco Firewall Services Module (FWSM) 3.2 Cisco Firewall Services Module (FWSM) 3.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38)

Cisco Firewall Services Module SCCP Inspection Remote Denial of Service Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliances and the Firewall Services Module (FWSM) for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

This issue is being tracked by Cisco BugID CSCsz79757 and CSCtb60485.

Cisco Firewall Services Module SCCP Inspection Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Firewall Services Module SCCP Inspection Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Firewall Services Module SCCP Inspection Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Firewall Services Module SCCP Inspection DoS (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in ASA 5500 Series Adaptive Se (Cisco)