I posted yesterday to patch your ASA boxes. Milw0rm has a reason why.

As the Packetninjas blog says, this is remotely exploitable, requires no authentication, and can even be spoofed.