Multiple Cisco Products SunRPC Inspection Variant C Remote Denial of Service Vulnerability

Bugtraq ID:	42195
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-1580 CVE-2010-2820
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	Mar 19 2015 09:05AM
Credit:	Cisco
Vulnerable:	Cisco FWSM for Cisco Catalyst 6500/7600 Series 3.1 Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 4.0 (8) Cisco Firewall Services Module (FWSM) 4.0 (6) Cisco Firewall Services Module (FWSM) 4.0 Cisco Firewall Services Module (FWSM) 3.2(3) Cisco Firewall Services Module (FWSM) 3.2(2) Cisco Firewall Services Module (FWSM) 3.2(13) Cisco Firewall Services Module (FWSM) 3.2 (2) Cisco Firewall Services Module (FWSM) 3.2 Cisco Firewall Services Module (FWSM) 3.1(6) Cisco Firewall Services Module (FWSM) 3.1(4) Cisco Firewall Services Module (FWSM) 3.1(16) Cisco Firewall Services Module (FWSM) 3.1(1.9) Cisco Firewall Services Module (FWSM) 3.1(1.7) Cisco Firewall Services Module (FWSM) 3.1 (3.3) Cisco Firewall Services Module (FWSM) 3.1 (3.2) Cisco Firewall Services Module (FWSM) 3.1 (3.11) Cisco Firewall Services Module (FWSM) 3.1 (3.1) Cisco Firewall Services Module (FWSM) 3.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.45) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.0(10.1) Cisco Firewall Services Module (FWSM) 3.2(16.1) Cisco Firewall Services Module (FWSM) 3.1(17.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.46) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5)

Multiple Cisco Products SunRPC Inspection Variant C Remote Denial of Service Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliances and the FWSM for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers are prone to a denial-of-service vulnerability that affects the Sun RPC inspection engine.

An attacker can exploit this issue to cause affected devices to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug IDs CSCtc85753 and CSCte61662.

Multiple Cisco Products SunRPC Inspection Variant C Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Multiple Cisco Products SunRPC Inspection Variant C Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Multiple Cisco Products SunRPC Inspection Variant C Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)