Security threats Toolkit

Cisco admits to more vulnerabilities

Richard Thurston ZDNet.co.uk

Published: 16 Feb 2007 17:14 GMT

Cisco has found two more vulnerabilities in its range of networking products.

The latest weaknesses are found in Cisco's PIX 500 series security appliances, its 5500 series of adaptive security appliances and its firewall services module. Hackers could use the various vulnerabilities to crash a networking appliance and bypass security policies. A related vulnerability can be used to corrupt access control lists, allowing traffic that should be blocked to pass into the corporate network.

Cisco has made patches available for the firewall service module and appliance vulnerabilities.

Just three days ago, Cisco revealed two vulnerabilities within IOS, the operating system on which its routers run. Left unpatched, they could result in the routers crashing and intrusion prevention software being circumvented.

Secunia, the vulnerability tracking firm, said the latest vulnerabilities were "moderately critical".

Did you find this article useful?
6 out of 6 people found this useful

Post a comment

Full Talkback thread

0 comments

More In Security threats

Company/Topic Alerts

Create a new alert from the list below:

Related Jobs

Infrastructure Engineer 37,000 Manchester

If you display skills in Linux/Unix/ IBM iSeries i5/OS Cisco PIX Firewall you application will be looked upon favourably. Successful candidate will ...

IT Specialist

Experience working with routers is a plus. Responds to all employee inquiries concerning IT operation through the IT tracking system. Desirable ...

FIREWALL ADMINISTRATOR - CISCO PIX/ASA / CHECKPOINT - BIRMINGHAM

You will be working with a broad range of security technology including: Cisco Pix/ASA Juniper Netscreen Checkpoint Bluecoat To apply as a minimum ...

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.