Thursday, February 18, 2010

Cisco patches multiple holes in its security products

The bad news is that Cisco today warned customers of multiple holes in its security products. The good news is that it has released patches for all of them. Affected products include he Cisco Firewall Services Module (FWSM) for the Cisco Catalyst 6500 switches and Cisco 7600 routers, Cisco ASA 5500 security appliance and Cisco Security Agent releases 5.1, 5.2 and 6.0 and the Cisco PIX 500.
The FWSM vulnerability may cause a denial of service. The Cisco FWSM may be forced to reload after processing an evil Skinny Client Control Protocol (SCCP) message. The vulnerability exists when SCCP inspection is enabled. It is only triggered by transit traffic not by traffic destined for the device. more........

No comments:

Pages