Cisco's dirty dozen fight IOS flaws
PrintPatches for the masses
Posted in Data Networking, 25th September 2008 08:52 GMT
Free whitepaper – Selecting an Industry-Standard Metric for Data Center Efficiency
Cisco has posted a bumper crop of 12 security advisories covering flaws in its IOS software and related networking kit.
The vulnerabilities create a route for skilled hackers to crash vulnerable systems or obtain sensitive information, among other exploits. Login credentials are not needed to carry out the majority of the attacks.
No one flaw stands out from the batch, but there is a broad theme. Flaws in how Cisco's software processes particular network protocol traffic, such as MPLS or SIP, can cause devices such as VPN appliances to crash.
Altogether the patch batch should equate to "no questions asked" overtime requests from sysadmins and ISP staffers, in particular.
A full summary of the patches can be found on Cisco's website here. The vulnerabilities were addressed in the second round of Cisco's biannual IOS security roundup. The network giant adopted the six-monthly patch cycle back in March as a way of making life easier for sysadmins. ®
Free whitepaper – Power and Cooling Capacity Management for Data Centers
Analyst Keynote: The Register Agile Data Center Summit
What Exchange can't do - and Dell can
Seven ways to optimize VMware server virtualization
Dell PowerEdge R710 solution with VMware ESX vs. Dell PowerEdge 2850 solution
Enabling The Agile Data Center
OpenOffice.org pushes gamers' buttons with OOMouse
Windows 7 kills two thirds of active Vista initiatives
Big Iron, big data, big networks, big problems
HP scores SMB storage hat-trick