Cisco ASA5500 Security Updates - cisco-sa-20100217-asa（情報元のブックマーク数）

IT セキュリティ

Cisco ASA5500にセキュリティアドバイザリが出ているそうです。複数の脆弱性に・・・・・って多い！！

Tim reports that Cisco has released a security advisory for Cisco ASA5500 products, outlining some security vulnerabilities and resolutions
The issues are:

  • TCP Connection Exhaustion Denial of Service Vulnerability
  • Session Initiation Protocol (SIP) Inspection Denial of Service Vulnerabilities
  • Skinny Client Control Protocol (SCCP) Inspection Denial of Service Vulnerability
  • WebVPN Datagram Transport Layer Security (DTLS) Denial of Service Vulnerability
  • Crafted TCP Segment Denial of Service Vulnerability
  • Crafted Internet Key Exchange (IKE) Message Denial of Service Vulnerability
  • NT LAN Manager version 1 (NTLMv1) Authentication Bypass Vulnerability
InfoSec Handlers Diary Blog - Cisco ASA5500 Security Updates - cisco-sa-20100217-asa

screenshot