Cisco ASA CX TCP CVE-2013-1203 Denial of Service Vulnerability

Bugtraq ID:	60587
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-1203
Remote:	Yes
Local:	No
Published:	Jun 17 2013 12:00AM
Updated:	Jun 17 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco ASA CX Context-Aware Security Software Base 0 Cisco ASA CX Context-Aware Security Software 9.0.2 Cisco ASA CX Context-Aware Security Software 9.0.1 Cisco ASA CX Context-Aware Security Software 9.0.2-68 Cisco ASA CX Context-Aware Security Software 9.0.1-40
Not Vulnerable:

Cisco ASA CX TCP CVE-2013-1203 Denial of Service Vulnerability

Cisco ASA CX is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

The following Cisco products are vulnerable:

Cisco ASA CX Context-Aware Security Software 9.0.1
Cisco ASA CX Context-Aware Security Software 9.0.1-40
Cisco ASA CX Context-Aware Security Software 9.0.2
Cisco ASA CX Context-Aware Security Software 9.0.2-68
Cisco ASA CX Context-Aware Security Software Base

This issue is being tracked by Cisco Bug ID CSCue88386.

Cisco ASA CX TCP CVE-2013-1203 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco ASA CX TCP CVE-2013-1203 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco ASA CX TCP CVE-2013-1203 Denial of Service Vulnerability

References:

• Cisco ASA CX TCP Traffic Denial of Service Vulnerability (Cisco)
  
• Cisco ASA-CX TCP Traffic Denial of Service Vulnerability (Cisco)
  
• Cisco Homepage (Cisco )