Multiple Cisco Products Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	55862
Class:	Design Error
CVE:	CVE-2012-4662 CVE-2012-4663
Remote:	Yes
Local:	No
Published:	Oct 10 2012 12:00AM
Updated:	Oct 10 2012 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(5) Cisco Firewall Services Module (FWSM) 4.1(1.2) Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.1 Cisco Catalyst 6500 Series ASA Services Module 8.5(1.6) Cisco Catalyst 6500 Series ASA Services Module 8.5(1.4) Cisco Catalyst 6500 Series ASA Services Module 8.5(1.2) Cisco Catalyst 6500 Series ASA Services Module 8.5 Cisco Catalyst 6500 Series ASA Services Module 8.4(2.11) Cisco Catalyst 6500 Series ASA Services Module 8.4(2.1) Cisco Catalyst 6500 Series ASA Services Module 8.4 Cisco Catalyst 6500 Series ASA Services Module 8.3(2.22) Cisco Catalyst 6500 Series ASA Services Module 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.4) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.5 Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.22) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.20) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.18) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3
Not Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(7) Cisco Catalyst 6500 Series ASA Services Module 8.4(2.5) Cisco Catalyst 6500 Series ASA Services Module 8.3(2.25) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.25)

Multiple Cisco Products Multiple Remote Denial of Service Vulnerabilities

Multiple Cisco products are prone to multiple remote denial-of-service vulnerabilities.

These issues are being tracked by Cisco Bug IDs: CSCtr21346, CSCtr21376, CSCtr27521 and CSCtr27524.

Successful exploit of these issues to cause the affected device to crash and reload, denying service to legitimate users.

The following products are affected:

Cisco Firewall Services Module (FWSM)
Cisco ASA 5500 Series Adaptive Security Appliances
Cisco Catalyst 6500 Series ASA Services Module

Multiple Cisco Products Multiple Remote Denial of Service Vulnerabilities

To exploit these issues, attackers can use readily available network utilities.

Multiple Cisco Products Multiple Remote Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Multiple Cisco Products Multiple Remote Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Multiple Vulnerabilities in Cisco ASA 5500 Series and Cisco Catalyst 6500 Series (CISCO)
  
• Multiple Vulnerabilities in Cisco Firewall Services Module (CISCO)