Denial of Service Vulnerability in Cisco Adaptive Security Appliances and Catalyst Devices

CVE-2012-4659

Summary

The AAA functionality in the IPv4 SSL VPN implementation found in Cisco Adaptive Security Appliances (ASA) 5500 series and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series can be exploited by remote attackers. By sending a specially crafted authentication response, an attacker can trigger a device reload, leading to a denial of service. Affected versions are prior to 8.2(5.30) and 8.3(2.34).

References