CVE-2009-0638
Last modified
CVE-2009-0638 is a vulnerability of currently unknown severity. The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.. EPSS estimates a 2.85% chance of exploitation in the next 30 days.
Description
The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Firewall Services Module | 2.1_\(0.208\) |
| Cisco | Firewall Services Module | 2.2 |
| Cisco | Firewall Services Module | 2.2\(1\) |
| Cisco | Firewall Services Module | 2.3 |
| Cisco | Firewall Services Module | 2.3\(1\) |
| Cisco | Firewall Services Module | 3.1 |
| Cisco | Firewall Services Module | 3.1\(5\) |
| Cisco | Firewall Services Module | 3.1\(6\) |
| Cisco | Firewall Services Module | 3.2 |
| Cisco | Firewall Services Module | 3.2\(1\) |
| Cisco | Firewall Services Module | 3.2\(2\) |
| Cisco | Firewall Services Module | 3.2\(3\) |
| Cisco | Firewall Services Module | 4.0 |
| Cisco | Firewall Services Module | 4.0\(4\) |
References
- http://secunia.com/advisories/36373Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/2329Vendor Advisory
- http://secunia.com/advisories/36373Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/2329Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-0638?
How severe is CVE-2009-0638?
How do I fix CVE-2009-0638?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-0632The IP Phone Personal Address Book (PAB) Synchronizer featur…
- CVE-2009-0633Multiple unspecified vulnerabilities in the (1) Mobile IP NA…
- CVE-2009-0634Multiple unspecified vulnerabilities in the home agent (HA) …
- CVE-2009-0635Memory leak in the Cisco Tunneling Control Protocol (cTCP) e…
- CVE-2009-0636Unspecified vulnerability in Cisco IOS 12.0 through 12.4, wh…
- CVE-2009-0637The SCP server in Cisco IOS 12.2 through 12.4, when Role-Bas…
- CVE-2009-0639PHP remote file inclusion vulnerability in moduli/libri/inde…
- CVE-2009-0640Directory traversal vulnerability in the administrative web …
- CVE-2009-0641sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x v…
- CVE-2009-0642ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properl…
- CVE-2009-0643Static code injection vulnerability in post.php in Simple PH…
- CVE-2009-0644The HTTP interface in Swann DVR4-SecuraNet has a certain def…
Are you affected by CVE-2009-0638?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST