A vulnerability has been reported in Cisco Global Site Selector, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error in the processing of DNS request, which can be exploited to crash the DNS server via a specially crafted sequence of DNS requests.

Successful exploitation requires that GSS is not configured with the optional Cisco Network Registrar (CNR) software.

The vulnerability is reported in versions prior to 3.0(1) of the following GSS products:
* Cisco GSS 4480 Global Site Selector
* Cisco GSS 4490 Global Site Selector
* Cisco GSS 4491 Global Site Selector
* Cisco GSS 4492R Global Site Selector

Solution
Update to version 3.0(1) or later.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20090107-gss.shtml

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers