Feeds

Cisco's dirty dozen fight IOS flaws

Patches for the masses

Internet Security Threat Report 2014

Cisco has posted a bumper crop of 12 security advisories covering flaws in its IOS software and related networking kit.

The vulnerabilities create a route for skilled hackers to crash vulnerable systems or obtain sensitive information, among other exploits. Login credentials are not needed to carry out the majority of the attacks.

No one flaw stands out from the batch, but there is a broad theme. Flaws in how Cisco's software processes particular network protocol traffic, such as MPLS or SIP, can cause devices such as VPN appliances to crash.

Altogether the patch batch should equate to "no questions asked" overtime requests from sysadmins and ISP staffers, in particular.

A full summary of the patches can be found on Cisco's website here. The vulnerabilities were addressed in the second round of Cisco's biannual IOS security roundup. The network giant adopted the six-monthly patch cycle back in March as a way of making life easier for sysadmins. ®

Beginner's guide to SSL certificates

More from The Register

next story
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
The DRUGSTORES DON'T WORK, CVS makes IT WORSE ... for Apple Pay
Goog Wallet apparently also spurned in NFC lockdown
IBM, backing away from hardware? NEVER!
Don't be so sure, so-surers
Hey - who wants 4.8 TERABYTES almost AS FAST AS MEMORY?
China's Memblaze says they've got it in PCIe. Yow
Microsoft brings the CLOUD that GOES ON FOREVER
Sky's the limit with unrestricted space in the cloud
This time it's SO REAL: Overcoming the open-source orgasm myth with TODO
If the web giants need it to work, hey, maybe it'll work
'ANYTHING BUT STABLE' Netflix suffers BIG Europe-wide outage
Friday night LIVE? Nope. The only thing streaming are tears down my face
Google roolz! Nest buys Revolv, KILLS new sales of home hub
Take my temperature, I'm feeling a little bit dizzy
Storage array giants can use Azure to evacuate their back ends
Site Recovery can help to move snapshots around
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Website security in corporate America
Find out how you rank among other IT managers testing your website's vulnerabilities.