CVE:CVE-2012-4660
CNNVD:CNNVD-201210-240
Cisco ASA是美国思科（Cisco）公司的一套防火墙设备。该设备还包括IPS（入侵防御系统）、SSL VPN、IPSec VPN、反垃圾邮件等功能。
Cisco Adaptive Security Appliances (ASA) 5500系列设备中的SIP检测引擎、ASA Services Module (ASASM) in Cisco Catalyst 6500系列设备软件8.2(5.17)之前的8.2版本、8.3(2.28)之前的8.3版本、8.4(2.13)之前的8.4版本、8.5(1.4)之前的8.5版本、8.6(1.5)之前的8.6版本中的中存在漏洞。远程攻击者利用该漏洞通过特制的SIP媒体更新数据包，导致拒绝服务（设备重载）。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 8.2,8.2(1,8.2(2,8.2(3,8.2(3.9,8.2(4,8.2(4.1,8.2(4.4,8.2(5,8.3(1,8.3(2,8.4,8.4(1,8.4(1.11,8.4(2,8.4(2.11,8.5,8.5(1,8.6,8.6(1,and avoid the version 8.2,8.2(1),8.2(2),8.2(3),8.2(3.9),8.2(4),8.2(4.1),8.2(4.4),8.2(5),8.3(1),8.3(2),8.4,8.4(1),8.4(1.11),8.4(2),8.4(2.11),8.5,8.5(1),8.6,8.6(1); Upgrade cisco 5500_series_adaptive_security_appliance to a higher version than *; Upgrade cisco catalyst_6500 to a higher version than *; Upgrade cisco catalyst_6503-e to a higher version than -; Upgrade cisco catalyst_6504-e to a higher version than -; Upgrade cisco catalyst_6506-e to a higher version than -; Upgrade cisco catalyst_6509-e to a higher version than -; Upgrade cisco catalyst_6509-neb-a to a higher version than -; Upgrade cisco catalyst_6509-v-e to a higher version than -; Upgrade cisco catalyst_6513 to a higher version than -; Upgrade cisco catalyst_6513-e to a higher version than -