Cisco ASA 5500 Series ASDM Real Time Log Viewer (CVE-2009-5037) Denial of Service Vulnerability

Bugtraq ID:	45763
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-5037
Remote:	Yes
Local:	No
Published:	May 27 2010 12:00AM
Updated:	May 27 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2 Cisco ASA 5500 Series Adaptive Security Appliance 7.1 Cisco ASA 5500 Series Adaptive Security Appliance 7.0
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(3)

Cisco ASA 5500 Series ASDM Real Time Log Viewer (CVE-2009-5037) Denial of Service Vulnerability

Cisco ASA security appliances are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users.

This issue is documented in Cisco bug IDs CSCsm11264 and CSCtb92911.

Cisco ASA 5500 Series ASDM Real Time Log Viewer (CVE-2009-5037) Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco ASA 5500 Series ASDM Real Time Log Viewer (CVE-2009-5037) Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco ASA 5500 Series ASDM Real Time Log Viewer (CVE-2009-5037) Denial of Service Vulnerability

References:

• ASDM Real-Time Log Viewer does not recieve any messages (Cisco Systems Inc)
  
• Cisco Homepage (Cisco )
  
• Problem with Real Time Log Viewer on ASA!!! (Cisco Systems Inc)