A vulnerability has been reported in Cisco IOS, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability exists due to an error in the handling of TCP packets during the establishment phase. This can be exploited to cause TCP connections to remain in a half-open state and consume system resources.

Successful exploitation does not require a full TCP three-way handshake and is possible e.g. via spoofed TCP packets.

The vulnerability is reported in Cisco IOS Software Release 15.1T.

Solution
Update to Cisco IOS Software Release 15.1(2)T0a or 15.1(2)T1 when it becomes available on 20-AUG-2010.

Provided and/or discovered by
Reported to the vendor by a customer.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20100812-tcp.shtml

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers