Multiple Cisco Products SunRPC/ILS Inspections Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	49951
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-3299 CVE-2011-3300 CVE-2011-3301 CVE-2011-3302 CVE-2011-3303
Remote:	Yes
Local:	No
Published:	Oct 05 2011 12:00AM
Updated:	Oct 05 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(5) Cisco Firewall Services Module (FWSM) 4.1(1.2) Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 4.0(15) Cisco Firewall Services Module (FWSM) 4.0(11.1) Cisco Firewall Services Module (FWSM) 4.0(10.1) Cisco Firewall Services Module (FWSM) 4.0 (8) Cisco Firewall Services Module (FWSM) 4.0 (6) Cisco Firewall Services Module (FWSM) 4.0 Cisco Firewall Services Module (FWSM) 3.2(3) Cisco Firewall Services Module (FWSM) 3.2(20) Cisco Firewall Services Module (FWSM) 3.2(2) Cisco Firewall Services Module (FWSM) 3.2(17.2) Cisco Firewall Services Module (FWSM) 3.2(16.1) Cisco Firewall Services Module (FWSM) 3.2(13) Cisco Firewall Services Module (FWSM) 3.2 (2) Cisco Firewall Services Module (FWSM) 3.2 Cisco Firewall Services Module (FWSM) 3.1(6) Cisco Firewall Services Module (FWSM) 3.1(4) Cisco Firewall Services Module (FWSM) 3.1(3.24) Cisco Firewall Services Module (FWSM) 3.1(20) Cisco Firewall Services Module (FWSM) 3.1(17.2) Cisco Firewall Services Module (FWSM) 3.1(16) Cisco Firewall Services Module (FWSM) 3.1(1.9) Cisco Firewall Services Module (FWSM) 3.1(1.7) Cisco Firewall Services Module (FWSM) 3.1 (3.3) Cisco Firewall Services Module (FWSM) 3.1 (3.2) Cisco Firewall Services Module (FWSM) 3.1 (3.18) Cisco Firewall Services Module (FWSM) 3.1 (3.11) Cisco Firewall Services Module (FWSM) 3.1 (3.1) Cisco Firewall Services Module (FWSM) 3.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.3) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(7) Cisco Firewall Services Module (FWSM) 4.0(16) Cisco Firewall Services Module (FWSM) 3.2(22) Cisco Firewall Services Module (FWSM) 3.1(21) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.25) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.4)

Multiple Cisco Products SunRPC/ILS Inspections Multiple Remote Denial of Service Vulnerabilities

Multiple Cisco products are prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to cause affected devices to reload, triggering a denial-of-service condition.

These issues are being tracked by Cisco Bug IDs CSCtq09972, CSCtq09978, CSCtq09986, CSCtq09989, CSCtq57802.

The following products are affected:

Cisco Firewall Services Module (FWSM)
Cisco ASA 5500 Series Adaptive Security Appliances
Cisco Catalyst 6500 Series ASA Services Module

Multiple Cisco Products SunRPC/ILS Inspections Multiple Remote Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Mod (Cisco)