Description

Cisco has confirmed a vulnerability in various products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The following products are affected:
* Cisco IOS 12.1(11)E and later in the 12.1E release train. Only crypto images (56i and k2) are vulnerable for the Cisco 7100 and 7200 Series Routers.
* Cisco IOS 12.2SY release train. Only crypto images (k8, k9 and k91) are vulnerable for the Cisco Catalyst 6500 Series and Cisco 7600 Series Routers.
* Cisco PIX 6.x
* Cisco Firewall Services Module for the Cisco Catalyst 6500 Series and Cisco 7600 Series routers
* Cisco MDS 9000 Series Multilayer Switch
* Cisco Content Service Switch 11000 series (WebNS versions 6.x and 7.x)
* Cisco Global Site Selector 4480
* CiscoWorks Common Services version 2.2
* CiscoWorks Common Management Foundation version 2.1
* Cisco Access Registrar
* Cisco Call Manager (CCM)
* Cisco Okena Stormwatch 3.2
* Cisco Application & Content Networking Software (ACNS)
* Cisco Threat Response (CTR)

For more information:
SA11139

NOTE: Cisco products are reportedly only affected by the first vulnerability.

Solution
See original advisory for software versions and fixes.
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area