A vulnerability has been reported in Cisco Intrusion Detection System and Cisco Intrusion Prevention System, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the processing of SSL v2 client Hello packets. This can be exploited to cause a DoS by sending a specially crafted Hello packet to a vulnerable system.

Successful exploitation can cause the mainApp process to fail, stopping a system from responding to remote management request sent to the web administration interface or the command-line interface via SSH, sending SMTP traps, and automatically updating ACLs (Access Control Lists) on remote firewall systems.

The vulnerability affects the following products:
- Cisco IDS 4.1(x) software prior to 4.1(5c)
- Cisco IPS 5.0(x) software prior to 5.0(6p1)
- Cisco IPS 5.1(x) software prior to 5.1(2)

Solution
Apply updated software.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area