Vulnerability Alert

An unauthenticated, remote attacker could exploit this vulnerability to cause a targeted device to reload, resulting in a DoS condition.  Repeated attacks could result in a sustained DoS condition.

The vulnerability is due to improper boundary checks by the HTTP inspection engine while inspecting transit HTTP traffic via TCP port 80 on the affected device.  The processing of crafted HTTP messages can cause the affected device to reload or to trigger memory leaks that may result in system instabilities.

An unauthenticated, remote attacker could exploit this vulnerability by sending crafted HTTP packets through the targeted device.  If successful, the attacker could cause the device to reload, resulting in a DoS condition.

Administrators are advised to apply the appropriate updates.

Administrators are advised to allow only privileged users to access administration or management systems.

Administrators are advised to implement an intrusion prevention system (IPS) or intrusion detection system (IDS) to help detect and prevent attacks that attempt to exploit this vulnerability.

Administrators may consider using IP-based access control lists (ACLs) to allow only trusted systems to access the affected systems.

Administrators are advised to monitor critical systems.

Cisco customers with active contracts can obtain updates through the Software Center at the following link: Cisco. Cisco customers without contracts can obtain upgrades by contacting the Cisco Technical Assistance Center at 1-800-553-2447 or 1-408-526-7209 or via e-mail at tac@cisco.com.