Some vulnerabilities have been reported in Cisco Firewall Services Module (FWSM), which can be exploited by malicious people to cause a DoS (Denial of Service).

1) Three errors exist in the SunRPC inspection engine while processing certain SunRPC messages. This can be exploited to reload a device via specially crafted SunRPC packets that transit the appliance.

2) An error exists in the processing of certain TCP packets when the device is configured in multi-mode (with virtual firewalls) and accepts Telnet, SSH, or ASDM connections. This can be exploited to reload the device by sending a series of specially crafted TCP packets.

Successful exploitation of this vulnerability requires a complete TCP three-way handshake.

Solution
Update to a fixed version. Please see the vendor's advisory for detailed patch information.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
cisco-sa-20100804-fwsm:
http://www.cisco.com/warp/public/707/cisco-sa-20100804-fwsm.shtml

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers