Vulnerability Team

Two new vulnearbilities are disclosure for Cisco Products.

1. Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances.

Cisco ASA 5500 Series Adaptive Security Appliances are affected by the following vulnerabilities:

• Transparent Firewall Packet Buffer Exhaustion Vulnerability
  
• Skinny Client Control Protocol (SCCP) Inspection Denial of Service Vulnerability
  
• Routing Information Protocol (RIP) Denial of Service Vulnerability
  
• Unauthorized File System Access Vulnerability
  

These vulnerabilities are independent; a release that is affected by one vulnerability is not necessarily affected by the others.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20110223-asa.shtml.





2. Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability.

A vulnerability exists in the Cisco Firewall Services Module (FWSM) for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers that may cause the Cisco FWSM to reload after processing a malformed Skinny Client Control Protocol (SCCP) message. Devices are affected when SCCP inspection is enabled.
Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20110223-fwsm.shtml.  
fuente: cisco.com