PT-2007-6589 · Cisco · Cisco Firewall Services Module+2

Published 2007-10-17 · Updated 2023-08-11 · CVE-2007-5568

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco PIX and ASA appliances versions 7.0 through 8.0 Cisco Firewall Services Module (FWSM) version 3.1(5) and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted packets. Two vulnerabilities exist, one triggered during the processing of Media Gateway Control Protocol (MGCP) packets and the other during the processing of Transport Layer Security (TLS) traffic that terminates on the security appliance.

Recommendations For Cisco PIX and ASA appliances versions 7.0 through 8.0, update to a version outside of this range to resolve the issue. For Cisco Firewall Services Module (FWSM) version 3.1(5) and earlier, update to a version later than 3.1(5) to resolve the issue. As a temporary workaround, consider restricting the processing of MGCP packets and TLS traffic that terminates on the appliance until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-5568

Affected Products

Cisco Asa

Cisco Firewall Services Module

Cisco Pix

References · 15

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20071017-asa · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5568 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtml · Vendor Advisory
• http://vupen.com/english/advisories/2007/3530 · Note
• http://securityfocus.com/bid/26104 · Note
• http://vupen.com/english/advisories/2007/3531 · Note
• http://secunia.com/advisories/27193 · Note
• http://securityfocus.com/bid/26109 · Note
• http://secunia.com/advisories/27236 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37259 · Note
• http://securitytracker.com/id?1018825 · Note
• http://securitytracker.com/id?1018826 · Note
• http://securitytracker.com/id?1018827 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37257 · Note