Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
BID:38278
Info
Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
| Bugtraq ID: | 38278 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0566 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2010 12:00AM |
| Updated: | Feb 17 2010 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco ASA 5500 Series Adaptive Security Appliance 7.0.4 .3 Cisco ASA 5500 Series Adaptive Security Appliance 7.0.4 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 |
| Not Vulnerable: |
Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.10) |
Discussion
Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
Cisco ASA 5500 devices are prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause an affected device to restart, denying service to legitimate users.
This issue is tracked by Cisco Bug ID CSCtb37219.
Cisco ASA 5500 devices are prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause an affected device to restart, denying service to legitimate users.
This issue is tracked by Cisco Bug ID CSCtb37219.
Exploit / POC
Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
Attackers can use readily available network utilities to exploit this issue.
Attackers can use readily available network utilities to exploit this issue.
Solution / Fix
Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
References:
References:
- Cisco ASA 5500 Series Homepage (Cisco)