CVE-2009-1165: High severity cisco catalyst 3750 series vulnerability

Published Jul 29, 2009

Updated

Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (memory consumption and device reload) via SSH management connections, aka Bug ID CSCsw40789.

Affected Software

37 affected components

cisco Catalyst 3750G

cisco Cisco 1500 Wireless Lan Controller=4.1

cisco Cisco 1500 Wireless Lan Controller=4.1m

cisco Cisco 1500 Wireless Lan Controller=4.2

cisco Cisco 1500 Wireless Lan Controller=5.0

cisco Cisco 1500 Wireless Lan Controller=5.1

cisco Cisco 1500 Wireless Lan Controller=5.2

cisco Cisco 2000 Wireless Lan Controller=4.1

cisco Cisco 2000 Wireless Lan Controller=4.1m

cisco Cisco 2000 Wireless Lan Controller=4.2

cisco Cisco 2000 Wireless Lan Controller=5.0

cisco Cisco 2000 Wireless Lan Controller=5.1

cisco Cisco 2000 Wireless Lan Controller=5.2

cisco Cisco 2100 Wireless Lan Controller=4.1

cisco Cisco 2100 Wireless Lan Controller=4.1m

cisco Cisco 2100 Wireless Lan Controller=4.2

cisco Cisco 2100 Wireless Lan Controller=5.0

cisco Cisco 2100 Wireless Lan Controller=5.1

cisco Cisco 2100 Wireless Lan Controller=5.2

cisco Cisco 4100 Wireless Lan Controller=4.1

cisco Cisco 4100 Wireless Lan Controller=4.1m

cisco Cisco 4100 Wireless Lan Controller=4.2

cisco Cisco 4100 Wireless Lan Controller=5.0

cisco Cisco 4100 Wireless Lan Controller=5.1

cisco Cisco 4100 Wireless Lan Controller=5.2

cisco Cisco 4200 Wireless Lan Controller=4.1

cisco Cisco 4200 Wireless Lan Controller=4.1m

cisco Cisco 4200 Wireless Lan Controller=4.2

cisco Cisco 4200 Wireless Lan Controller=5.0

cisco Cisco 4200 Wireless Lan Controller=5.1

cisco Cisco 4200 Wireless Lan Controller=5.2

cisco Cisco 4400 Wireless Lan Controller=4.1

cisco Cisco 4400 Wireless Lan Controller=4.1m

cisco Cisco 4400 Wireless Lan Controller=4.2

cisco Cisco 4400 Wireless Lan Controller=5.0

cisco Cisco 4400 Wireless Lan Controller=5.1

cisco Cisco 4400 Wireless Lan Controller=5.2

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml

Event History

Jul 29, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1165?

CVE-2009-1165 has been classified with a high severity rating due to its memory leak vulnerability.

How do I fix CVE-2009-1165?

To fix CVE-2009-1165, upgrade the Cisco Wireless LAN Controller to a patched version that is 4.2.205.0 or later, 5.1.163.0 or later, or 5.2.178.0 or later.

Which Cisco Wireless LAN Controller versions are affected by CVE-2009-1165?

CVE-2009-1165 affects Cisco Wireless LAN Controller versions prior to 4.2.205.0, 5.1.163.0, 5.2.178.0, and specific earlier releases in those version series.

What impact does CVE-2009-1165 have on Cisco Wireless LAN Controllers?

The impact of CVE-2009-1165 is a potential degradation of performance and stability due to a memory leak that could exhaust available memory.

Are all Cisco Wireless LAN Controllers vulnerable to CVE-2009-1165?

Not all Cisco Wireless LAN Controllers are vulnerable; only those operating on the specific affected versions mentioned in the CVE description are impacted.