OSVDB ID: 39298

Title: Cisco Firewall Services Module (FWSM) Unspecified Remote DoS

Info

Disclosure

Dec 19, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jan 07, 2008

Description

Cisco Firewall Services Module (FWSM) contains a flaw that may allow a remote denial of service. The issue is triggered when certain unspecified standard network traffic is processed by the layer 7 application inspection engine, and will result in loss of availability for the system.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Workaround, Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Security Software

Solution

Upgrade to version 3.2(4) or higher, as it has been reported to fix this vulnerability. It is also possible to mitigate against the flaw by implementing the following workaround: Disable the TCP normalizing function, which is enabled by default.

Products

Cisco Systems, Inc.

Firewall Services Module (FWSM)

3.2(3)

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/39298