vulnerability announce CVE-2012-0378

Cisco ASA: denial of service via MPF

Synthesis of the vulnerability

An attacker can use stale connections, in order to reach connection limits of MPF (Modular Policy Framework), which block legitimate connections of Cisco Adaptive Security Appliances.
Impacted products: ASA.
Severity: 2/4.
Creation date: 11/05/2012.
Identifiers: CSCtv19854, CVE-2012-0378, VIGILANCE-VUL-11622.

Description of the vulnerability

An attacker can use stale connections, in order to reach connection limits of MPF (Modular Policy Framework), which block legitimate connections of Cisco Adaptive Security Appliances.

Technical details are unknown.
Complete Vigil@nce bulletin.... (free access)

Share this bulletin

          

Computer vulnerabilities tracking service

Vigil@nce provides a systems vulnerabilities patch. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system. Each administrator can customize the list of products for which he wants to receive vulnerability alerts. The technology watch team tracks security threats targeting the computer system.