Cisco ASA 5500 Series MSN IM Inspection (CVE-2011-3304) Denial of Service Vulnerability

Bugtraq ID:	49952
Class:	Design Error
CVE:	CVE-2011-3304
Remote:	Yes
Local:	No
Published:	Oct 05 2011 12:00AM
Updated:	Oct 05 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.5 Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(4.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(4) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(3) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.49) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.47) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.46) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.45) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 7.2
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(5.9) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.50) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.25) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5.3)

Cisco ASA 5500 Series MSN IM Inspection (CVE-2011-3304) Denial of Service Vulnerability

Cisco ASA 5500 Series adaptive security appliances are prone to a denial-of-service vulnerability that affects the 'MSN IM' inspection feature.

An attacker can exploit this issue to cause a vulnerable device to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug ID CSCtl67486.

Cisco ASA 5500 Series MSN IM Inspection (CVE-2011-3304) Denial of Service Vulnerability

Attackers can use readily available networking tools to exploit this issue.

Cisco ASA 5500 Series MSN IM Inspection (CVE-2011-3304) Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco ASA 5500 Series MSN IM Inspection (CVE-2011-3304) Denial of Service Vulnerability

References:

• Cisco ASA 5500 Series Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series (Cisco)