| Home : March 27 2014 Computer News : Cisco fixes denial-of-service flaws in IOS software for networking devices |
|
Cisco fixes denial-of-service flaws in IOS software for networking devices |
March 27, 2014
Cisco Systems released security updates for its IOS software used on routers, switches and other networking gear in order to fix seven vulnerabilities that could be exploited by attackers to impact the performance of affected devices or force them to reboot.The newly released IOS versions contain patches for two vulnerabilities identified in the software’s Network Address Translation (NAT) feature that’s commonly used in routing scenarios. One vulnerability could be exploited by sending malformed DNS packets to be processed and translated by an affected device and the other by sending certain sequences of TCP packets.“To determine whether NAT has been enabled in the Cisco IOS Software configuration, log in to the device and issue the ‘show ip nat statistics’ command,” Cisco said in a security advisory published Wednesday. “If NAT is active, the sections ‘Outside interfaces’ and ‘Inside interfaces’ will each include at least one interface.”To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2116880/cisco-fixes-denialofservice-flaws-in-ios-software-for-networking-devices.html#tk.rss_all
|
|
|
|
|
