CVE:CVE-2010-4677
CNNVD:CNNVD-201101-037
Cisco Adaptive Security Appliances（ASA，自适应安全设备）Software是美国思科（Cisco）公司的一套运行于防火墙中的操作系统。
带有软件8.2(3)之前版本的Cisco自适应安全设备(ASA)5500系列设备中的emWEB中存在资源管理错误漏洞。远程攻击者可以借助对名称中包含空格字符的文档的请求导致拒绝服务(守护进程崩溃)。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 8.2\(2\,7.0,7.0(0,7.0(2,7.0(4,7.0(5,7.0(5.2,7.0(6.7,7.0.1,7.0.1.4,7.0.2,7.0.4,7.0.4.3,7.0.5,7.0.6,7.0.7,7.0.8,7.0.8:interim,7.1,7.1(2,7.1(2.5,7.1(2.27,7.1(2.48,7.1(2.49,7.1(5,7.1.1,7.1.2,7.2,7.2(1,7.2(1.22,7.2(2,7.2(2.5,7.2(2.7,7.2(2.8,7.2(2.10,7.2(2.14,7.2(2.15,7.2(2.16,7.2(2.17,7.2(2.18,7.2(2.19,7.2(2.48,7.2.1,7.2.2,7.2.3,7.2.4,7.2.5,8.0,8.0.2,8.0.3,8.0.4,8.0.5,8.2(1,8.2.1,8.2.2,8.2.2:interim,and avoid the version (,8.2\(2\)],7.0,7.0(0),7.0(2),7.0(4),7.0(5),7.0(5.2),7.0(6.7),7.0.1,7.0.1.4,7.0.2,7.0.4,7.0.4.3,7.0.5,7.0.6,7.0.7,7.0.8,7.0.8:interim,7.1,7.1(2),7.1(2.5),7.1(2.27),7.1(2.48),7.1(2.49),7.1(5),7.1.1,7.1.2,7.2,7.2(1),7.2(1.22),7.2(2),7.2(2.5),7.2(2.7),7.2(2.8),7.2(2.10),7.2(2.14),7.2(2.15),7.2(2.16),7.2(2.17),7.2(2.18),7.2(2.19),7.2(2.48),7.2.1,7.2.2,7.2.3,7.2.4,7.2.5,8.0,8.0.2,8.0.3,8.0.4,8.0.5,8.2(1),8.2.1,8.2.2,8.2.2:interim; Upgrade cisco 5500_series_adaptive_security_appliance to a higher version than *; Upgrade cisco asa_5500 to a higher version than *