Multiple Cisco Products CVE-2013-3385 Remote Denial of Service Vulnerability

Bugtraq ID:	60807
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3385
Remote:	Yes
Local:	No
Published:	Jun 26 2013 12:00AM
Updated:	Jun 26 2013 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Multiple Cisco Products CVE-2013-3385 Remote Denial of Service Vulnerability

Multiple Cisco products are prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions.

This issue being tracked by Cisco bug IDs CSCzv63329, CSCzv58669, and CSCzv78669.

The following are affected:

Cisco Email Security Appliance (ESA) prior to 7.1.5-106 and prior to 7.6.3-019
Cisco Web Security Appliance (WSA) prior to 7.1.3-013, 7.1.4-101, 7.5.0-838, 7.5.1-201, and 7.7.0-602
Cisco Content Security Management Appliance (SMA) prior to 7.9.1-102 and 8.0.0-404

Multiple Cisco Products CVE-2013-3385 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco Products CVE-2013-3385 Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Multiple Cisco Products Management GUI Denial of Service Vulnerability (Cisco)
  
• Multiple Vulnerabilities in Cisco Content Security Management Appliance (Cisco)
  
• Multiple Vulnerabilities in Cisco Email Security Appliance (Cisco)
  
• Multiple Vulnerabilities in Cisco Web Security Appliance (Cisco)