Remote Denial of Service Vulnerability in Cisco ASA 5500 and PIX 500 Security Appliances

CVE-2010-0149

Summary

A vulnerability exists in the Cisco ASA 5500 Series Adaptive Security Appliances and the Cisco PIX 500 Series Security Appliance that allows remote attackers to execute a denial of service attack. This can be achieved through specially crafted TCP segments sent during the termination of a TCP connection, leading to a situation where the connection remains in a CLOSEWAIT state. This state prevents the establishment of new TCP connections, potentially disrupting network services.

References