PT-2012-5067 · Cisco · Sensorapp

Published 2012-09-16 · Updated 2012-09-17 · CVE-2012-3899

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions sensorApp on Cisco IPS 4200 series sensors versions 6.0, 6.2, and 7.0

Description The issue is related to improper memory allocation, which can be exploited by remote attackers to cause a denial of service. This can result in memory corruption, process crash, and traffic-inspection outage via network traffic.

Recommendations For versions 6.0, 6.2, and 7.0, consider applying a patch or fix to properly allocate memory and prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-3899

Affected Products

Sensorapp

References · 2

• http://cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3899 · Security Note