Cisco Systems
Cisco has released a pair of new security advisories

Cisco warns of new security risks

Attack can cripple Access Control Server and security appliances

Shaun Nichols in San Francisco

Cisco Systems is warning enterprise users of several recently discovered and patched security flaws.

The first exists in the company's Access Control Server (ACS). If exploited, the vulnerability could allow an attacker to crash the server, leading to a denial-of-service attack.

Advertisement

The flaw is believed to exist in all current versions of ACS for Windows and Cisco Secure ACS Solution Engine.

The company has issued a patch and is advising network administrators to apply the update.

Cisco said that the vulnerability exists in the handling of Remote Access Dial-In User Service (Radius) communications.

An attacker could exploit the vulnerability by way of a specially-crafted Radius authentication data packet sent to the server.

The company noted that, in order for the exploit to be carried out, the attacker must know the IP address of the target server as well as the Radius Shared Secret.

Discovery of the issue was credited to researchers Laurent Butti and Gabriel Campana.

Cisco also warned of six flaws in its ASA 5500 adaptive security and Pix security appliances.

The vulnerabilities include five denial-of-service flaws and one which could lead to information disclosure.

The company is advising its users to apply the latest updates for both appliances in order to protect against attack.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Cisco guns for Exchange

Is network giant looking to compete with Microsoft via purchase of email provider PostPath?

San Francisco

San Francisco government still locked out of computers

'Rogue employee' refuses to divulge passwords

Cisco and Comcast test 100Gb Ethernet

Optical infrastructure enables transmission of 100GE over DWDM network

Cisco seeks local talent in new markets

Company looking at India, China and the Middle East

Related whitepapers

Related jobs

Most watched

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

a padlock

Microsoft to plug security holes

Microsoft has given advance warning of a number of security...

Nokia handset

Top 10 articles, 10 July 09

No Nokia Android phone, ActiveX attacks and Google enters into...

Can Google beat Microsoft at its own game?

Google's announcement this week that it plans to step into...

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Primary Navigation