Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtml | vendor advisory |
http://www.securitytracker.com/id?1018827 | vdb entry |
http://secunia.com/advisories/27193 | third party advisory |
http://www.vupen.com/english/advisories/2007/3531 | vdb entry |
http://www.securitytracker.com/id?1018826 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/37260 | vdb entry |
http://www.securityfocus.com/bid/26104 | vdb entry |