Cisco FWSM 3.x before 3.1(3.2) when authentication is configured to use \aaa authentication match\ or \aaa authentication include\ allows remote attackers to cause a denial of service (device reboot) via a long HTTP request.