Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Advisory ID: cisco-sa-20100804-fwsm Revision 1.0 For Public Release 2010 August 04 1600 UTC GMT +---------------------------------------------------------------------...

Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability Advisory ID: cisco-sa-20100217-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20100217-fwsm.shtml Revision 1.0 For...

Design/Logic Flaw

The Cisco Firewall Services Module FWSM 4.0 before 4.08, as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service crash via a malformed Skinny Client Control Protocol SCCP message...

CVE-2010-0151

The Cisco Firewall Services Module FWSM 4.0 before 4.08, as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service crash via a malformed Skinny Client Control Protocol SCCP message...

CVE-2010-0151

The Cisco Firewall Services Module FWSM 4.0 before 4.08, as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service crash via a malformed Skinny Client Control Protocol SCCP message...

CVE-2010-0151

CVE-2010-0151 affects Cisco ASA 5500 Series and Cisco Firewall Services Module (FWSM) when Skinny SCCP inspection is enabled. A malformed SCCP message can cause the device to reload (DoS). The Cisco advisory assigns CVE-2010-0151 to this SCCP vulnerability; affected trains include ASA software ve...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory, cisco-sa-20100217-fwsm, addresses a vulnerability in the Cisco Firewall Services Module FWSM for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers. Successful and repeated exploitation ...

CVE-2009-0638

The Cisco Firewall Services Module FWSM 2.x, 3.1 before 3.116, 3.2 before 3.213, and 4.0 before 4.06 for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service traffic-handling outage via a series of malformed ICMP messages...

Design/Logic Flaw

The Cisco Firewall Services Module FWSM 2.x, 3.1 before 3.116, 3.2 before 3.213, and 4.0 before 4.06 for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service traffic-handling outage via a series of malformed ICMP messages...

Cisco防火墙服务模块ICMP消息拒绝服务漏洞

CVECAN ID: CVE-2009-0638 Cisco FWSM是Cisco设备上的防火墙服务模块。 Cisco FWSM软件中存在漏洞，如果处理了多个特制的ICMP消息，就会导致FWSM停止转发接口之间的通讯，或停止处理到达FWSM的通讯（管理通讯）。这是由于FWSM用于处理通讯的一个网络处理器（NP）在处理特定类型的ICMP消息时可能耗尽所有可用的执行线程，这种行为限制了可用于处理更多通讯的执行线程。 任何中间通讯或到达FWSM的通讯都受影响，无论是否启用了ICMP检查。 Cisco Firewall Services Module 4.x Cisco Firewall...

CVE-2009-0638

The Cisco Firewall Services Module FWSM 2.x, 3.1 before 3.116, 3.2 before 3.213, and 4.0 before 4.06 for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service traffic-handling outage via a series of malformed ICMP messages...

CVE-2009-0638

CVE-2009-0638 affects Cisco FWSM (Firewall Services Module) on Catalyst 6500 and 7600 platforms. The vulnerability arises when the device processes multiple crafted ICMP messages, causing a denial-of-service by stopping traffic forwarding or failing to process management/transit traffic. Affected...

Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability Advisory ID: cisco-sa-20090819-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20090819-fwsm.shtml Revision 1.0 For Public Release 2009 August 19 1600 UTC GMT...

Cisco防火墙服务模块中应用程序检测拒绝服务漏洞

BUGTRAQ ID: 26941 CVE ID：CVE-2007-5584 CNCVE ID:CNCVE-20075584 Cisco Firewall Services Module FWSM是一款思科公司提供的防火墙服务模块，集成在Cisco Catalyst 6500交换机和Cisco 7600系列路由器上。 Cisco Firewall Services Module FWSM包含的第7层应用程序检测处理上存在问题，远程攻击者可以利用漏洞使FWSM模块重载，造成拒绝服务攻击。...

Design/Logic Flaw

Unspecified vulnerability in Cisco Firewall Services Module FWSM 3.23 allows remote attackers to cause a denial of service device reload via crafted "data in the control-plane path with Layer 7 Application Inspections."...

CVE-2007-5584

CVE-2007-5584 affects Cisco Firewall Services Module (FWSM) running software version 3.2(3) . A vulnerability in the control-plane path data handling within the Layer 7 Application Inspection module can be triggered by normal traffic, causing the FWSM to reload and leading to a denial of service....

CVE-2007-5584: Undefined Security Weakness

Unspecified vulnerability in Cisco Firewall Services Module FWSM 3.23 allows remote attackers to cause a denial of service device reload via crafted "data in the control-plane path with Layer 7 Application Inspections."...

Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module Advisory ID: cisco-sa-20071219-fwsm ============ Revision 1.0 ============ Last Updated 2007 December 19 1600 UTC GMT For Public Release 2007 December 19...

Design/Logic Flaw

Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...

Code injection

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module FWSM 3.15 and earlier, allow remote attackers to cause a denial of service device reload via a crafted MGCP packet, aka CSCsi90468 appliance and CSCsi00694 FWSM...