----------------------------------------------------------------------

Want to work within IT-Security?

Secunia is expanding its team of highly skilled security experts.
We will help with relocation and obtaining a work permit.

Currently the following type of positions are available:
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Cisco Security Agent for Linux Port Scan Denial of Service

SECUNIA ADVISORY ID:
SA22574

VERIFY ADVISORY:
http://secunia.com/advisories/22574/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Cisco Unified CallManager 5.x
http://secunia.com/product/11019/
Cisco Security Agent (CSA) 4.x
http://secunia.com/product/4246/
Cisco Unified Presence Server 1.x
http://secunia.com/product/12424/
Cisco Security Agent (CSA) 5.x
http://secunia.com/product/12423/

DESCRIPTION:
A vulnerability has been reported in Cisco Security Agent for Linux,
which can be exploited by malicious people to cause a DoS (Denial of
Service).

The vulnerability is caused due to an error within the detection of
port scans. This can be exploited to stop the Cisco Security Agent
(CSA) from responding due to excessive resource consumption by
starting a port scan with certain options.

The vulnerability is reported in CSA 4.5 for Linux prior to Hotfix
4.5.1.657, CSA 5.0 for Linux prior to Hotfix 5.0.0.193,  and in the
standalone CSA shipped with Cisco Unified CallManager (CUCM) 5.0
versions including 5.0(4), and  Cisco Unified Presence Server (CUPS)
1.0 versions including 1.0(2).

SOLUTION:
Apply Hotfixes.
http://www.cisco.com/pcgi-bin/tablebuild.pl/cups-10?psrtdcat20e2

CSA version 4.5 for Linux:
Apply Hotfix 4.5.1.657

CSA version 5.0 for Linux:
Apply Hotfix 5.0.0.193

CUCM 5.0 version including 5.0(4):
Apply COS COP upgrade.

CUPS 1.0 version including 1.0(2):
Apply COS COP upgrade.

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtml

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------