March 2007
Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module
ID: 71
Ref: 013/2007
Date: 07 March 2007:18:08:50
Version: 1
Title: Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module
Abstract: Multiple vulnerabilities exist in the Cisco Firewall Services Module. These vulnerabilities occur in the processing of specific Hypertext Transfer Protocol, Secure HTTP, Session Initiation Protocol, and Simple Network Management Protocol traffic
Vendors affected: Cisco
Applications affected: Cisco
Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Advisory ID: cisco-sa-20070214-fwsm
Multiple vulnerabilities exist in the Cisco Firewall Services Module (FWSM). These vulnerabilities occur in the processing of specific Hypertext Transfer Protocol (HTTP), Secure HTTP (HTTPS), Session Initiation Protocol (SIP), and Simple Network Management Protocol (SNMP) traffic. If verbose logging is enabled for debugging purposes, a vulnerability exists when the FWSM processes packets destined to itself. All of these vulnerabilities may result in a reload of the device.
An additional vulnerability is included in this advisory in which the manipulation of access control lists (ACLs) that make use of object groups may corrupt the ACL and create a situation where unwanted traffic may be permitted or desirable traffic may be blocked.
These vulnerabilities are independent of each other; a release that is affected by one vulnerability is not necessarily affected by the others.
There are workarounds for some of the vulnerabilities disclosed in this advisory.
Cisco has made free software available to address this issue for affected customers.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070214-fwsm.shtml
______________________________________________________________________________
CPNI values your feedback.
1. Which of the following most reflects the value of the advisory to you?
(Place an 'X' next to your choice)
Very useful:__ Useful:__ Not useful:__
2. If you did not find it useful, why not?
3. Any other comments? How could we improve our advisories?
Thank you for your contribution.
______________________________________________________________________________
CPNI wishes to acknowledge the contributions of Cisco for the information contained in this advisory.
______________________________________________________________________________