Cisco ASA 5500 Series and Cisco Catalyst 6500 Series CVE-2012-4660 Denial of Service Vulnerability

Bugtraq ID:	55864
Class:	Design Error
CVE:	CVE-2012-4660
Remote:	Yes
Local:	No
Published:	Oct 10 2012 12:00AM
Updated:	Oct 10 2012 12:00AM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.6(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.6 Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.5 Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.11) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.4(1) Cisco ASA 5500 Series Adaptive Security Appliance 8.4 Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.25) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.23) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.22) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.20) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.18) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.8) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(4.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(4) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(3) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.19) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.5(1.4) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(2.28)

Cisco ASA 5500 Series and Cisco Catalyst 6500 Series CVE-2012-4660 Denial of Service Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause a vulnerable device to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug ID CSCtr63728.

Cisco ASA 5500 Series and Cisco Catalyst 6500 Series CVE-2012-4660 Denial of Service Vulnerability

Attackers can use readily available networking tools to exploit this issue.

Cisco ASA 5500 Series and Cisco Catalyst 6500 Series CVE-2012-4660 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco ASA 5500 Series and Cisco Catalyst 6500 Series CVE-2012-4660 Denial of Service Vulnerability

References:

• Cisco ASA 5500 Series Homepage (Cisco)
  
• Cisco Catalyst Homepage (Cisco System)