Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
BID:38280
Info
Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
| Bugtraq ID: | 38280 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0565 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2010 12:00AM |
| Updated: | Feb 17 2010 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2 |
| Not Vulnerable: |
Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) |
Discussion
Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
Cisco ASA security appliances are prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause the device to reload, denying service to legitimate users.
This issue is documented in Cisco bug ID CSCtb64913.
Cisco ASA security appliances are prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause the device to reload, denying service to legitimate users.
This issue is documented in Cisco bug ID CSCtb64913.
Exploit / POC
Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
To exploit this issue, attackers can use readily available network utilities.
To exploit this issue, attackers can use readily available network utilities.
Solution / Fix
Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
Solution:
The vendor has released updates. Please see the referenced advisory for details.
Solution:
The vendor has released updates. Please see the referenced advisory for details.
References
Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
References:
References: