Multiple Cisco Products SunRPC Inspection Variant B Remote Denial of Service Vulnerability

Bugtraq ID:	42192
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-1579 CVE-2010-2819
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	Mar 19 2015 09:38AM
Credit:	Cisco
Vulnerable:	Cisco FWSM for Cisco Catalyst 6500/7600 Series 3.1 Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 4.0 (8) Cisco Firewall Services Module (FWSM) 4.0 (6) Cisco Firewall Services Module (FWSM) 4.0 Cisco Firewall Services Module (FWSM) 3.2(3) Cisco Firewall Services Module (FWSM) 3.2(2) Cisco Firewall Services Module (FWSM) 3.2(13) Cisco Firewall Services Module (FWSM) 3.2 (2) Cisco Firewall Services Module (FWSM) 3.2 Cisco Firewall Services Module (FWSM) 3.1(6) Cisco Firewall Services Module (FWSM) 3.1(4) Cisco Firewall Services Module (FWSM) 3.1(16) Cisco Firewall Services Module (FWSM) 3.1(1.9) Cisco Firewall Services Module (FWSM) 3.1(1.7) Cisco Firewall Services Module (FWSM) 3.1 (3.3) Cisco Firewall Services Module (FWSM) 3.1 (3.2) Cisco Firewall Services Module (FWSM) 3.1 (3.11) Cisco Firewall Services Module (FWSM) 3.1 (3.1) Cisco Firewall Services Module (FWSM) 3.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.45) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.0(10.1) Cisco Firewall Services Module (FWSM) 3.2(16.1) Cisco Firewall Services Module (FWSM) 3.1(17.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.46) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5)

Multiple Cisco Products SunRPC Inspection Variant B Remote Denial of Service Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliances and the FWSM for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers are prone to a denial-of-service vulnerability that affects the Sun RPC inspection engine.

An attacker can exploit this issue to cause affected devices to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug IDs CSCtc79922 and CSCte61622.

Multiple Cisco Products SunRPC Inspection Variant B Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Multiple Cisco Products SunRPC Inspection Variant B Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Multiple Cisco Products SunRPC Inspection Variant B Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)