|
Cisco Products Crypto Library Denial of Service
|
|
Secunia Advisory:
|
SA25364
|
|
|
Release Date:
|
2007-05-23
|
|
Last Update:
|
2008-06-30
|
|
Popularity:
|
8,262 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Partial Fix
|
|
| OS: | Cisco Adaptive Security Appliance (ASA) 7.x
Cisco IOS 12.x
Cisco IOS R12.x
Cisco IOS XR 3.x
Cisco PIX 7.x
|
|
| Software: | Cisco Firewall Services Module (FWSM) 2.x
Cisco Firewall Services Module (FWSM) 3.x
Cisco Unified Communications Manager 4.x
Cisco Unified Communications Manager 5.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-3894
|
|
Description:
A vulnerability has been reported in various Cisco products, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to the use of a vulnerable third party library.
For more information:
SA25343
Solution:
Cisco IOS and Cisco IOS XR:
See vendor advisory for a patch matrix.
Cisco PIX and ASA Security Appliance:
Update to version 7.0(6.7), 7.1(2.27), 7.2(1.22), or 7.2(2).
Cisco Firewall Service Module (FWSM):
Update to the 3.1(6) maintenance release, expected in 2007-June. Reportedly, 2.3(x) FWSM releases are not affected.
Cisco Unified CallManager:
Update to version 5.1(2). Fixes for other versions are expected soon. See vendor advisory for more details.
Provided and/or discovered by:
Reported by the vendor.
Changelog:
2008-06-30: Updated the "Original Advisory" section. Updated the "Cisco Firewall Service Module (FWSM)" entry in the "Solution".
Original Advisory:
http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml
Other References:
SA25343:
http://secunia.com/advisories/25343/
US-CERT VU#754281:
http://www.kb.cert.org/vuls/id/754281
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
