Cisco ASA Appliance TCP Connection Exhaustion Denial of Service Vulnerability

Bugtraq ID:	38275
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-0149
Remote:	Yes
Local:	No
Published:	Feb 17 2010 12:00AM
Updated:	Feb 17 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46)

Cisco ASA Appliance TCP Connection Exhaustion Denial of Service Vulnerability

Cisco ASA security appliances are prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to exhaust available TCP connections, resulting in a denial-of-service condition.

This issue is documented in Cisco bug ID CSCsz77717.

Cisco ASA Appliance TCP Connection Exhaustion Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco ASA Appliance TCP Connection Exhaustion Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco ASA Appliance TCP Connection Exhaustion Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)