BID:55863

Multiple Cisco Products CVE-2012-4661 Buffer Overflow Vulnerability

Info

Multiple Cisco Products CVE-2012-4661 Buffer Overflow Vulnerability

Bugtraq ID:	55863
Class:	Design Error
CVE:	CVE-2012-4661
Remote:	Yes
Local:	No
Published:	Oct 10 2012 12:00AM
Updated:	Oct 10 2012 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(5) Cisco Firewall Services Module (FWSM) 4.1(1.2) Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Service Module (FWSM) 4.1(7) Cisco Catalyst 6500 Series ASA Services Module 8.6(1.1) Cisco Catalyst 6500 Series ASA Services Module 8.5(1.6) Cisco Catalyst 6500 Series ASA Services Module 8.5(1.4) Cisco Catalyst 6500 Series ASA Services Module 8.5(1.2) Cisco Catalyst 6500 Series ASA Services Module 8.5 Cisco Catalyst 6500 Series ASA Services Module 8.4(3) Cisco Catalyst 6500 Series ASA Services Module 8.4(2.5) Cisco Catalyst 6500 Series ASA Services Module 8.4(2.11) Cisco Catalyst 6500 Series ASA Services Module 8.4(2.1) Cisco Catalyst 6500 Series ASA Services Module 8.4 Cisco Catalyst 6500 Series ASA Services Module 8.3(2.29) Cisco Catalyst 6500 Series ASA Services Module 8.3(2.25) Cisco Catalyst 6500 Series ASA Services Module 8.3(2.22) Cisco Catalyst 6500 Series ASA Services Module 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.6(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.6 Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.4) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.5 Cisco ASA 5500 Series Adaptive Security Appliance 8.4(3) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.11) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.28) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.25) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.22) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.20) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.18) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3

Not Vulnerable:

Discussion

Multiple Cisco Products CVE-2012-4661 Buffer Overflow Vulnerability

Multiple Cisco products are prone to a buffer-overflow vulnerability.

This issue is being tracked by Cisco Bug ID CSCtr21359.

Attackers can exploit this issue to execute arbitrary command within the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.

The following products are affected:

Cisco Firewall Services Module (FWSM)
Cisco ASA 5500 Series Adaptive Security Appliances
Cisco Catalyst 6500 Series ASA Services Module

Exploit / POC

Multiple Cisco Products CVE-2012-4661 Buffer Overflow Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Solution / Fix

Multiple Cisco Products CVE-2012-4661 Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

References

Multiple Cisco Products CVE-2012-4661 Buffer Overflow Vulnerability

References:

Cisco Homepage (Cisco )