Cisco is urging users to update all applications and components that are vulnerable to a Java Secure Socket Extension (JSSE) flaw disclosed by Sun on July 10.
Some versions of Sun JSSE do not properly handle certain Transport Layer Security or Secure Sockets Layer handshake requests, a problem that could result in DoS attacks. Cisco products affected include Cisco Unified Call Manager and Cisco Unified Presence. There is no workaround for this issue, but mitigation is possible, according to a Cisco Security Response.
More Cisco Security Advisories
Go to Cisco Subnet for more Cisco news, blogs, discussion forums, security alerts, book giveaways, and more.
