Secunia

Cisco has released an interim advisory stating that certain Cisco products are vulnerable to the OpenSSH "buffer_append_space()" Buffer Management Vulnerability.

For more information:
SA9743

The following software has been identified as vulnerable by Cisco:
Cisco Catalyst Switching Software (CatOS)
CiscoWorks 1105 Hosting Solution Engine (HSE)
CiscoWorks 1105 Wireless LAN Solution Engine (WLSE)
Cisco SN 5428 Storage Router

Vulnerable versions are:
SN5428-2.5.1-K9
SN5428-3.2.1-K9
SN5428-3.2.2-K9
SN5428-3.3.1-K9
SN5428-3.3.2-K9
SN5428-2-3.3.1-K9
SN5428-2-3.3.2-K9

Other Cisco products such as IOS, PIX, Catalyst 6000 Firewall Service Module, VPN3000 and VPN5000 are not vulnerable.

Solution
Disable SSH or filter access at your perimeter so that only trusted IP addresses can access the service.
Further details available in Customer Area

Deep Links
Links available in Customer Area