Cisco Releases Security Advisories
Cisco has released a series of security advisories for the Cisco IOS Software. The advisories detail vulnerabilities that can result in systems being rebooted or hung, as well as being recipients of denial of service attacks.
The affected software includes those Cisco IOS products that are configured for NAT, set up to listen to LDP hello messages, configured with a specific TCP window size, configured for TCP path MTU discovery, running SIP voice services enabled, and a quite a few other things. Additionally, all Cisco 7200 and 7301 routers with VPN Acceleration Module 2+ are vulnerable to attack via malformed IKE packets.
Cisco has released free updates addressing all issues, which are available on their website. US-Cert has recommended that all users of Cisco products review the vulnerability list and apply appropriate patches.




Follow Technorati