Multiple Cisco Products CVE-2013-5508 Denial of Service Vulnerability

Bugtraq ID:	62912
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-5508
Remote:	Yes
Local:	No
Published:	Oct 09 2013 12:00AM
Updated:	Oct 09 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Firewall Services Module (FWSM) 4.1(8) Cisco Firewall Services Module (FWSM) 4.1(7) Cisco Firewall Services Module (FWSM) 4.1(5) Cisco Firewall Services Module (FWSM) 4.1(1.2) Cisco Firewall Services Module (FWSM) 4.1(1.1) Cisco Firewall Services Module (FWSM) 4.1 Cisco Firewall Services Module (FWSM) 3.2(3) Cisco Firewall Services Module (FWSM) 3.2(23) Cisco Firewall Services Module (FWSM) 3.2(22) Cisco Firewall Services Module (FWSM) 3.2(20) Cisco Firewall Services Module (FWSM) 3.2(2) Cisco Firewall Services Module (FWSM) 3.2(17.2) Cisco Firewall Services Module (FWSM) 3.2(16.1) Cisco Firewall Services Module (FWSM) 3.2(13) Cisco Firewall Services Module (FWSM) 3.2 (2) Cisco Firewall Services Module (FWSM) 3.2
Not Vulnerable:

Multiple Cisco Products CVE-2013-5508 Denial of Service Vulnerability

Multiple Cisco Products including Cisco Firewall Services Module Software and Cisco Adaptive Security Appliance Software are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to reload an affected device, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCui34914 and CSCub98434.

The following products are vulnerable:

Cisco Firewall Services Module Software versions prior to 3.2(27) and 4.1(14)
Cisco Adaptive Security Appliance Software versions prior to 7.2(5.12), 8.2(5.44), 8.3(2.39), 8.4(6), 8.5(1.18), 8.6(1.12), 8.7(1.6), 9.0(2.10), and 9.1(2)

Multiple Cisco Products CVE-2013-5508 Denial of Service Vulnerability

An attacker can exploit this issue using readily available network utilities.

Multiple Cisco Products CVE-2013-5508 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)