Cisco Adaptive Security Appliance SSH Timeout Denial of Service Vulnerability

Bugtraq ID:	57485
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-5717
Remote:	Yes
Local:	No
Published:	Jan 16 2013 12:00AM
Updated:	Jan 16 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Adaptive Security Appliance 8.2.1 Cisco Adaptive Security Appliance 8.1.2 Cisco Adaptive Security Appliance 8.0.2 11 Cisco Adaptive Security Appliance 8.4(1) Cisco Adaptive Security Appliance 8.1.2.25 Cisco Adaptive Security Appliance 8.1 (2)14 Cisco Adaptive Security Appliance 8.0.4.34 Cisco Adaptive Security Appliance 8.0(4)
Not Vulnerable:

Cisco Adaptive Security Appliance SSH Timeout Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) is prone to a remote denial-of-service vulnerability.

Successful exploits may allow an attacker to cause a crash, resulting in a denial-of-service condition.

This issue is being tracked by Cisco bug ID CSCtc59462.

Cisco Adaptive Security Appliance SSH Timeout Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Adaptive Security Appliance SSH Timeout Denial of Service Vulnerability

Solution:
Reportedly the issue has been fixed, however Symantec has not confirmed it. Please contact the vendor for more information.

Cisco Adaptive Security Appliance SSH Timeout Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Adaptive Security Appliance SSH timeout vulnerability (Cisco)