BID:6212

Cisco PIX TACACS+/RADIUS HTTP Proxy Buffer Overrun Vulnerability

Info

Cisco PIX TACACS+/RADIUS HTTP Proxy Buffer Overrun Vulnerability

Bugtraq ID:	6212
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 20 2002 12:00AM
Updated:	Nov 20 2002 12:00AM
Credit:	Announced by Cisco.
Vulnerable:	Cisco PIX Firewall 6.2.1 Cisco PIX Firewall 6.2 (1) Cisco PIX Firewall 6.2 Cisco PIX Firewall 6.1.3 Cisco PIX Firewall 6.1 (2) Cisco PIX Firewall 6.1 + Cisco PIX Firewall 515 + Cisco PIX Firewall 520 Cisco PIX Firewall 6.0.3 Cisco PIX Firewall 6.0 (2) Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 6.0 + Cisco PIX Firewall 515 + Cisco PIX Firewall 520 Cisco PIX Firewall 5.2 (7) Cisco PIX Firewall 5.2 (6) Cisco PIX Firewall 5.2 (5) Cisco PIX Firewall 5.2 (3.210) Cisco PIX Firewall 5.2 (2) Cisco PIX Firewall 5.2 Cisco PIX Firewall 5.1.4 Cisco PIX Firewall 5.1 (4.206) Cisco PIX Firewall 5.1 + Cisco PIX Firewall 515 + Cisco PIX Firewall 520 Cisco PIX Firewall 5.0 + Cisco PIX Firewall 515 + Cisco PIX Firewall 520

Not Vulnerable:

Discussion

Cisco PIX TACACS+/RADIUS HTTP Proxy Buffer Overrun Vulnerability

Cisco has reported a vulnerability in its PIX Firewall devices. A buffer overrun condition exists in the HTTP RADIUS/TACACS+ proxy component. The condition occurs when the PIX device processes a specially malformed request. Further technical details are not known at this time. Exploitation of this vulnerability may lead to code executed on target devices. It may also be possible to cause a denial of service, resulting in a network outage until the device is reset.

Exploit / POC

Cisco PIX TACACS+/RADIUS HTTP Proxy Buffer Overrun Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.