Cisco patches security software
Who guards the guards?
Posted in Security, 15th July 2005 09:33 GMT
Free whitepaper – Hands on with Hyper-V 3.0 and virtual machine movement
Cisco's security software is itself subject to a hazardous security bug. Certain versions of the network giant's desktop and server intrusion prevention client - Cisco Security Agent - are vulnerable to a denial of service attack. Cisco has issued a patch.
The vulnerability stems from an error within the packet handling of the software which creates a mechanism to crash vulnerable systems via a specially crafted IP packet. The software bug affects CSA version 4.5 running on Windows system (excluding Windows XP). The bug was discovered by Ben Collins of InfoSec Research Labs. More info on the glitch and links to the relevant hotfix can be found here. ®
Related stories
Cisco fixes 'decoy attack' in security software
Cisco source code theft part of 'mega-hack'
Cisco beefs up IOS security
Security products 'riddled' with bugs
Cisco Security Agent laid bare
Free whitepaper – Hands on with Hyper-V 3.0 and virtual machine movement
Send corrections
IT infrastructure monitoring strategies
The new Office Garage series:
Data control in the cloud
Top 10 SIEM implementer’s checklist
