Cisco Patches Three Security Vulnerabilities

<a href="http://www.networkworld.com/news/2008/052208-ahead-of-rootkit-talk-cisco.html">Network World</a>, <a href="http://www.crn.com/security/207801702">ChannelWeb</a>

Jim Manico, OWASP Global Board Member

May 22, 2008

1 Min Read

Cisco has released a trio security patches that fix denial-of-service bugs and a privilege escalation vulnerability.The bugs -- which Cisco said were discovered by its own researchers -- affect the SSH (Secure Shell) software in Cisco's Internetwork Operating System (IOS), used to power its routers, and in the Cisco Service Control Engine, which is provides carrier-grade networking services. The privilege escalation vulnerability affects its Voice Portal automated telephone customer service software.

While there are no immediate workarounds, Cisco has released free, downloadable software upgrades that address the Service Control Engine and Voice Portal vulnerabilities. The IOS bug is of particular interest to security researchers at large, who have been looking into the affects of malicious software on such an operating system.Network World, ChannelWeb

Read more about:

2008

About the Author(s)

Jim Manico

OWASP Global Board Member

Jim Manico is a Global Board Member for the OWASP foundation where he helps drive the strategic vision for the organization. OWASP's mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. OWASP's AppSecUSA<https://2015.appsecusa.org/c/> conferences represent the nonprofit's largest outreach efforts to advance its mission of spreading security knowledge, for more information and to register, see here<https://2015.appsecusa.org/c/?page_id=534>. Jim is also the founder of Manicode Security where he trains software developers on secure coding and security engineering. He has a 18 year history building software as a developer and architect. Jim is a frequent speaker on secure software practices and is a member of the JavaOne rockstar speaker community. He is the author of Iron-Clad Java: Building Secure Web Applications<http://www.amazon.com/Iron-Clad-Java-Building-Secure-Applications/dp/0071835881> from McGraw-Hill and founder of Brakeman Pro. Investor/Advisor for Signal Sciences.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights