Secunia

Some vulnerabilities have been reported in Cisco Service Control Engine, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An unspecified error within the SCE SSH server can be exploited to cause system instability or a reload of the SCE via certain SSH login activity.

2) An unspecified error during the login process within the SCE SSH server can be exploited to cause a DoS via specific SSH credentials that attempt to change the authentication method.

Vulnerabilities #1 and #2 are reported in the SCE 1000 and 2000 series with software versions prior to 3.1.6.

3) An unspecified error within the SCE SSH server when processing SSH traffic to the SCE management interface can lead to an illegal IO operation and an imperative reboot of the SCE.

Vulnerability #3 is reported in the SCE 1000 and 2000 series with software versions prior to 3.0.7 and 3.1.0.

Successful exploitation of these vulnerabilities requires that the SSH server is enabled (not enabled by default).

Solution
Update to version 3.1.6.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20080521-sce.shtml

Deep Links
Links available in Customer Area