Cisco ASA 5500 and FWSM SCCP Inspection Remote Denial of Service Vulnerability

Bugtraq ID:	46518
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-0394
Remote:	Yes
Local:	No
Published:	Feb 23 2011 12:00AM
Updated:	Feb 23 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 4.0 Cisco Firewall Services Module (FWSM) 3.2 Cisco Firewall Services Module (FWSM) 3.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2 Cisco ASA 5500 Series Adaptive Security Appliance 7.1 Cisco ASA 5500 Series Adaptive Security Appliance 7.0
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(5) Cisco Firewall Services Module (FWSM) 4.0(15) Cisco Firewall Services Module (FWSM) 3.2(20) Cisco Firewall Services Module (FWSM) 3.1(20) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.47) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 7.0(8.11)

Cisco ASA 5500 and FWSM SCCP Inspection Remote Denial of Service Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliances and the Firewall Services Module (FWSM) for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

This issue is being tracked by Cisco bug IDs CSCtg69457 and CSCtl84952.

Cisco ASA 5500 and FWSM SCCP Inspection Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco ASA 5500 and FWSM SCCP Inspection Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco ASA 5500 and FWSM SCCP Inspection Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Pr (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)