Cisco Firewall Services Module Multi-Mode TCP Processing Remote Denial of Service Vulnerability

Bugtraq ID:	42194
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-2821
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	Mar 19 2015 08:20AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 4.0(10.1) Cisco Firewall Services Module (FWSM) 4.0 (8) Cisco Firewall Services Module (FWSM) 4.0 (6) Cisco Firewall Services Module (FWSM) 4.0 Cisco Firewall Services Module (FWSM) 3.2(3) Cisco Firewall Services Module (FWSM) 3.2(2) Cisco Firewall Services Module (FWSM) 3.2(16.1) Cisco Firewall Services Module (FWSM) 3.2(13) Cisco Firewall Services Module (FWSM) 3.2 (2) Cisco Firewall Services Module (FWSM) 3.2
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(1.2) Cisco Firewall Services Module (FWSM) 4.0(11.1) Cisco Firewall Services Module (FWSM) 3.2(17.2)

Cisco Firewall Services Module Multi-Mode TCP Processing Remote Denial of Service Vulnerability

Cisco Firewall Services Module (FWSM) for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers is prone to a denial-of-service vulnerability that affects TCP packet processing in multi-mode.

An attacker can exploit this issue to cause affected devices to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug ID CSCtg68694.

Cisco Firewall Services Module Multi-Mode TCP Processing Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Firewall Services Module Multi-Mode TCP Processing Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Firewall Services Module Multi-Mode TCP Processing Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Mod (Cisco)