A vulnerability has been reported in Cisco Security Agent for Linux, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the detection of port scans. This can be exploited to stop the Cisco Security Agent (CSA) from responding due to excessive resource consumption by starting a port scan with certain options.

The vulnerability is reported in CSA 4.5 for Linux prior to Hotfix 4.5.1.657, CSA 5.0 for Linux prior to Hotfix 5.0.0.193, and in the standalone CSA shipped with Cisco Unified CallManager (CUCM) 5.0 versions including 5.0(4), and Cisco Unified Presence Server (CUPS) 1.0 versions including 1.0(2).

Solution
Apply Hotfixes.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtml

Deep Links
Links available to Secunia VIM customers