Secunia

Cisco has reported two vulnerabilities in the Cisco PIX firewall, which can be exploited by malicious people to cause a DoS (Denial of Service).

An unspecified vulnerability can be exploited to crash and reload a vulnerable device by sending specially crafted SNMPv3 messages to it.

This affects versions:
6.3.1, 6.2.2 and earlier, 6.1.4 and earlier, 5.x.x and earlier.

It is possible to close IPSec tunnels established between a VPNC configured PIX firewall and a VPN server by initiating an IKE Phase 1 negotiation to the outside interface of the VPNC configured firewall.

This affects versions:
6.2.3 and earlier (6.1.x and 5.x.x are not affected).

Solution
Update to version 6.3.2, 6.2.3, or 6.1.5.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Vendor credits discovery of the SNMPv3 vulnerability to Rasto Rickardt.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area