Cisco Firewall Services Module Security Bypass and Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Firewall Services Module (FWSM), which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).

1. An error in the implementation of the system log message ID 302015 when generating a log message for IPv6 traffic can be exploited to cause a memory corruption.
   

   Successful exploitation of this vulnerability requires that the FWSM has interfaces with IPv6 addresses.

2. An error in the authentication proxy feature during a high number of network access authentication requests related to the "aaa authentication match" and "aaa authentication include" commands can be exploited to cause a crash.
3. An error in the TACACS+ implementation can be exploited to bypass the TACACS+ authentication mechanism.
4.  Four errors in the SunRPC inspection engine while processing certain SunRPC messages can be exploited to reload a device via specially crafted SunRPC packets that transit the appliance.
5.  An error in the ILS inspection engine while processing certain ILS messages can be exploited to reload a device via specially crafted ILS packets that transit the appliance.