All the latest UK technology news, reviews and analysis

Cisco warns of IronPort security flaws

by Shaun Nichols

11 Feb 2010

Comments: 2

  • Tweet this
Cisco
Two of the flaws could allow an attacker to view system administration details

Cisco has issued a Security Alert warning of three vulnerabilities in its IronPort line. The flaws affect versions 6.2 and 6.5 of the IronPort Encryption appliance, as well as IronPort PostX MAP.

The company said that the IronPort C, M and S appliances are not believed to be vulnerable.

Cisco reported that two of the flaws, if exploited, could allow an attacker to view sensitive system administration details, while the third could allow remote code execution.

The first of the information disclosure flaws is in the appliance's administration interface component, and the second is in the WebSafe Servlet component.

The remote code execution vulnerability affects the HTTPS server component. This can be mitigated by restricting access to trusted IP addresses, the company said.

Administrators looking to obtain and install the fixes are advised to contact Cisco's IronPort technical support team.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

34%

1%

11%

54%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Symanteccloud

Social networking: a guide for IT managers

Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them

Riverbed

Mitigating the risks of IT change

The importance of understanding your infrastructure

Global Project/Programme Manager-with recruitment deployment experienc

My London client is looking for an experienced Programme...

PHP Developers (All Levels)

My leading client is looking for a number of excellent...

Group Services Manager - Telecoms

My client, a leading international name in Manufacturing...

Automated PHP Developer

My client is looking for an Automated Engineer/Developer...

To send to more than one email address, simply separate each address with a comma.