Cisco ASA 5500 IKE Message Denial of Service Vulnerability
BID:38279
Info
Cisco ASA 5500 IKE Message Denial of Service Vulnerability
| Bugtraq ID: | 38279 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0567 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2010 12:00AM |
| Updated: | Feb 17 2010 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco ASA 5520 Series Adaptive Security Appliance 0 Cisco ASA 5520 Series Adaptive Security Appliance 0 Cisco ASA 5510 Series Adaptive Security Appliance 0 Cisco ASA 5505 Series Adaptive Security Appliance 0 Cisco ASA 5500 Series Adaptive Security Appliance 7.0.4 .3 Cisco ASA 5500 Series Adaptive Security Appliance 7.0.4 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2 Cisco ASA 5500 Series Adaptive Security Appliance 7.1 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.0 |
| Not Vulnerable: |
Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.10) |
Discussion
Cisco ASA 5500 IKE Message Denial of Service Vulnerability
Cisco ASA security appliances are prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause all IPsec tunnels to terminate.
This issue is documented in Cisco bug ID CSCtc47782.
Cisco ASA security appliances are prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause all IPsec tunnels to terminate.
This issue is documented in Cisco bug ID CSCtc47782.
Exploit / POC
Cisco ASA 5500 IKE Message Denial of Service Vulnerability
To exploit this issue, attackers can use readily available network utilities.
To exploit this issue, attackers can use readily available network utilities.
Solution / Fix
Cisco ASA 5500 IKE Message Denial of Service Vulnerability
Solution:
The vendor has released updates. Please see the referenced advisory for details.
Solution:
The vendor has released updates. Please see the referenced advisory for details.
References
Cisco ASA 5500 IKE Message Denial of Service Vulnerability
References:
References: