So much for Cisco's once-announced plans to only release software patches twice a year. New patches seem to be coming out monthly. Today Cisco released updates to fix multiple holes in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. Applause goes out to Cisco for putting safety ahead of scheduling.
Today's security advisory addresses the following vulnerabilities, Cisco says:
- Crafted TCP ACK Packet Vulnerability
- Crafted TLS Packet Vulnerability
- Instant Messenger Inspection Vulnerability
- Vulnerability Scan Denial of Service
- Control-plane Access Control List Vulnerability
The first four vulnerabilities may lead to a denial of service (DoS) condition and the fifth vulnerability may allow an attacker to bypass control-plane access control lists (ACL). Note: These vulnerabilities are independent of each other. A device may be affected by one vulnerability and not affected by another.
The Cisco Subnet blog is written by Network World managing editor Jim Duffy Visit the Cisco Subnet home page daily and while you are there, subscribe to the Cisco Alert e-mail newsletter, which includes news and views generated by the Cisco Subnet community as well as Cisco-related stories on Network World and elsewhere on the Web.
Follow Jim Duffy on Twitter