Cisco ASA 5500 Series 8.2(3) Multiple Remote Vulnerabilities

Bugtraq ID:	45767
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-4672 CVE-2010-4675 CVE-2010-4676 CVE-2010-4677 CVE-2010-4678 CVE-2010-4679 CVE-2010-4680 CVE-2010-4681 CVE-2010-4682
Remote:	Yes
Local:	No
Published:	Jan 11 2011 12:00AM
Updated:	Jan 11 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(3) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.46)

Cisco ASA 5500 Series 8.2(3) Multiple Remote Vulnerabilities

Cisco ASA 5500 series appliances are prone to multiple remote vulnerabilities, including:

Multiple security-bypass vulnerabilities

Multiple denial-of-service vulnerabilities

Attackers can exploit these issues to cause denial-of-service conditions or bypass certain security restrictions.

Cisco ASA 5500 Series 8.2(3) Multiple Remote Vulnerabilities

An attacker can exploit these issues by using readily available network utilities.

Cisco ASA 5500 Series 8.2(3) Multiple Remote Vulnerabilities

Solution:
The vendor released an update. Please see the references for more information.

Cisco ASA 5500 Series 8.2(3) Multiple Remote Vulnerabilities

References:

• Cisco Homepage (Cisco)
  
• Release Notes for the Cisco ASA 5500 Series, Version 8.2(x) (Cisco)