TCP Split Handshake Connection Security Bypass Vulnerability - Should I be concerned?

[MATTHEW WADE]

What gives with this latest finding?

[praprama]

Hey Matt,

I guess you are referring to this article:

http://www.macrothink.org/journal/index.php/npa/article/viewFile/285/272

Following sometime of testing, we have not been able to re-produce the behavior as mentioned. Hence, we can be pretty sure that ASAs and Cisco IPSs are not affected by this vulnerability. You should be able to see details at:

http://blogs.cisco.com/security/cisco-investigation-for-tcp-split-handshake-issue-reported-by-nss/

http://tools.cisco.com/security/center/viewAlert.x?alertId=22462

Hope this helps!!

Regards,

Prapanch