CVE:CVE-2012-4659
CNNVD:CNNVD-201210-239
Cisco ASA是美国思科（Cisco）公司的一套防火墙设备。该设备还包括IPS（入侵防御系统）、SSL VPN、IPSec VPN、反垃圾邮件等功能。
Cisco Adaptive Security Appliances (ASA) 5500系列设备中IPv4 SSL VPN实现中的AAA功能中和Cisco Catalyst 6500系列设备软件8.2(5.30)之前的8.2版本和8.3(2.34)之前的8.3版本中的ASA Services Module (ASASM)中存在漏洞。远程攻击者利用该漏洞通过特制的身份验证响应导致拒绝服务（设备重载）。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 8.2,8.2(1,8.2(2,8.2(3,8.2(3.9,8.2(4,8.2(4.1,8.2(4.4,8.2(5,8.3(1,8.3(2,and avoid the version 8.2,8.2(1),8.2(2),8.2(3),8.2(3.9),8.2(4),8.2(4.1),8.2(4.4),8.2(5),8.3(1),8.3(2); Upgrade cisco 5500_series_adaptive_security_appliance to a higher version than *; Upgrade cisco catalyst_6500 to a higher version than *; Upgrade cisco catalyst_6503-e to a higher version than -; Upgrade cisco catalyst_6504-e to a higher version than -; Upgrade cisco catalyst_6506-e to a higher version than -; Upgrade cisco catalyst_6509-e to a higher version than -; Upgrade cisco catalyst_6509-neb-a to a higher version than -; Upgrade cisco catalyst_6509-v-e to a higher version than -; Upgrade cisco catalyst_6513 to a higher version than -; Upgrade cisco catalyst_6513-e to a higher version than -