Cisco ACE Log Retention Denial of Service Vulnerability, Open CSCug78957

Symptoms: A vulnerability in SSL logging daemon on Cisco ACE could allow an unauthenticated, remote attacker to cause partial DOS condition on the affected device. The vulnerability is due to Cisco ACE not rotating logs from SSL sessions, causing a hard drive to run out of free space. An attacker could exploit this vulnerability by sending a large amount of SSL connections to the affected device. An exploit could allow the attacker to exhaust free space on the hard drive, causing operations such as configuration and writing configurations on the disk to fail with the following error: ''write error: No space left on device'' Additional errors can be seen on the Cisco ACE console.
Conditions: Running A2(3.6) or later and heavily using the HTTPS management interface.
Workaround: Contact TAC that can apply a workaround on your module. PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 5/4.5: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:L/Au:N/C:N/I:N/A:P/E:F/RL:W/RC:C CVE ID CVE-2013-1202 has been assigned to document this issue. Additional details about the vulnerability described here can be found at: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1202 Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html.

ACE A2(1.0a) rserver shows arp_failed, but probe, arp and access exists, Fixed CSCtc63117

Symptom: show rserver indicates rserver status s ARP_FAILED show arp has mac address for rserver but is LEARNED state instead of RSERVER you can ping rserver from ace
Conditions: rserver is down for load balancing due ARP_FAILED state
Workaround: delete rserver and reconfigure
Further Problem Description:

ACE Application Control Engine Hot Issues from Cisco TAC

Cisco ACE Log Retention Denial of Service Vulnerability, Open CSCug78957

ACE A2(1.0a) rserver shows arp_failed, but probe, arp and access exists, Fixed CSCtc63117