Múltiplas vulnerabilidades em Cisco IOS

Categoria: Alertas

quinta, 26 março 2009 11:28

Sistemas Operativos Implicados:	Cisco IOS
Aplicações Implicadas:	Indefinido

A Cisco anunciou um conjunto de vulnerabilidades no seu software IOS. As lista anunciada descreve vulnerabilidades em TCP, UDP, Mobile IP e VPN.

I. Descrição

The March 25, 2009, Cisco IOS Security Advisory bundled publication includes eight Security Advisories. All of the advisories address vulnerabilities in Cisco IOS Software. Each advisory lists the releases that correct the vulnerability or vulnerabilities in the advisory, and each security advisory also lists recommended releases that correct the vulnerabilities in the other seven advisories. The table in this document lists releases that correct all Cisco IOS Software vulnerabilities that have been published in Cisco Security Advisories on March 25, 2009, or earlier.

http://www.cisco.com/warp/public/707/cisco-sa-20090325-bundle.shtml

Individual publication links are listed below:

• Cisco IOS cTCP Denial of Service Vulnerability
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml
  
  
• Cisco IOS Software Multiple Features IP Sockets Vulnerability
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-ip.shtml
  
  
• Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-mobileip.shtml
  
  
• Cisco IOS Software Secure Copy Privilege Escalation Vulnerability
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-scp.shtml
  
  
• Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-sip.shtml
  
  
• Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-tcp.shtml
  
  
• Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-udp.shtml
  
  
• Cisco IOS Software WebVPN and SSLVPN Vulnerabilities
  http://www.cisco.com/warp/public/707/cisco-sa-20090325-webvpn.shtml

II. Solução

Aplicar uptades e workarounds descritos no site http://www.cisco.com/warp/public/707/cisco-sa-20090325-bundle.shtml

III. Referências

Cisco Security Advisory: Summary of Cisco IOS Software Bundled Advisories, March 25, 2009:
http://www.cisco.com/warp/public/707/cisco-sa-20090325-bundle.shtml