PT-2009-2763 · Cisco · Cisco Catalyst 3750 Integrated Wireless Lan Controller+3

Published 2009-02-04 · Updated 2018-10-30 · CVE-2009-0058

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 4.x through 4.2.175.0 Cisco Wireless LAN Controller versions 5.x through 5.1 Cisco Catalyst 6500 Wireless Services Module versions 4.x through 4.2.175.0 Cisco Catalyst 6500 Wireless Services Module versions 5.x through 5.1 Cisco Catalyst 3750 Integrated Wireless LAN Controller versions 4.x through 4.2.175.0 Cisco Catalyst 3750 Integrated Wireless LAN Controller versions 5.x through 5.1

Description The issue allows remote attackers to cause a denial of service, potentially leading to a web authentication outage or device reload, via unspecified network traffic. Multiple vulnerabilities exist, including denial of service and privilege escalation vulnerabilities. These vulnerabilities are independent of each other.

Recommendations For Cisco Wireless LAN Controller version 4.x, update to version 4.2.176.0 or later. For Cisco Wireless LAN Controller version 5.x, update to version 5.2 or later. For Cisco Catalyst 6500 Wireless Services Module version 4.x, update to version 4.2.176.0 or later. For Cisco Catalyst 6500 Wireless Services Module version 5.x, update to version 5.2 or later. For Cisco Catalyst 3750 Integrated Wireless LAN Controller version 4.x, update to version 4.2.176.0 or later. For Cisco Catalyst 3750 Integrated Wireless LAN Controller version 5.x, update to version 5.2 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-0058

Affected Products

Cisco Catalyst 3750 Integrated Wireless Lan Controller

Cisco Catalyst 6500 Wireless Services Module

Cisco Wireless Lan Controller

Cisco Wls

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0058 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090204-wlc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0058 · Security Note
• http://securityfocus.com/bid/33608 · Note
• http://secunia.com/advisories/33749 · Note
• http://securitytracker.com/id?1021679 · Note