VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
CVE-2010-2819
firewall_services_module, firewall_services_module_software: Unspecified vulnerability in the SunRPC inspection ...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2819

Original

Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61622.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-08-09
Source Information Category:
Advisory, Alert
Last Updated:
2010-08-09




Affected Product Tags
cpe:/h:cisco:catalyst_6500
cpe:/h:cisco:catalyst_7600
cpe:/h:cisco:firewall_services_module
cpe:/o:cisco:firewall_services_module_software:3.1
cpe:/o:cisco:firewall_services_module_software:3.1%2816%29
cpe:/o:cisco:firewall_services_module_software:3.1%2817%29
cpe:/o:cisco:firewall_services_module_software:3.1%285%29
cpe:/o:cisco:firewall_services_module_software:3.1%286%29
cpe:/o:cisco:firewall_services_module_software:3.2
cpe:/o:cisco:firewall_services_module_software:3.2%281%29
cpe:/o:cisco:firewall_services_module_software:3.2%2813%29
cpe:/o:cisco:firewall_services_module_software:3.2%2814%29
cpe:/o:cisco:firewall_services_module_software:3.2%2816%29
cpe:/o:cisco:firewall_services_module_software:3.2%282%29
cpe:/o:cisco:firewall_services_module_software:3.2%283%29
cpe:/o:cisco:firewall_services_module_software:4.0
cpe:/o:cisco:firewall_services_module_software:4.0%2810%29
cpe:/o:cisco:firewall_services_module_software:4.0%284%29
cpe:/o:cisco:firewall_services_module_software:4.0%286%29
cpe:/o:cisco:firewall_services_module_software:4.0%287%29
cpe:/o:cisco:firewall_services_module_software:4.0%288%29
cpe:/o:cisco:firewall_services_module_software:4.1
cpe:/o:cisco:firewall_services_module_software:4.1%281%29
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

Alternatives




References
CISCO 20100804 Multiple Vulnerabilities in Cisco Firewall Services Module




SECUNIA 40843




Vulnerability Type Input Validation (CWE-20)





Copyright © 2010 JPCERT/CC All Rights Reserved.