Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Cisco patches a dozen router bugs

12 security flaws are fixed in the semi-annual update

Cisco Systems has released its twice-yearly set of security patches for its router firmware, fixing 12 security flaws in the products.

Cisco describes the bugs in 11 security advisories, released Wednesday, saying that they affect routers and switches that use the Cisco Unified Communications Manager, as well as a variety of services in the devices' underlying Cisco IOS operating system.

"Exploits of the individual vulnerabilities could result in two different impacts, a breach in confidentiality or a denial of service," Cisco said in a note describing the updates, posted to its Web site on Wednesday.

Among the patches is a fix for an IOS bug that could let an attacker bypass access control policies on devices that use the Object Groups for ACL feature, Cisco said. This could give an attacker access to parts of the network that they shouldn't be allowed to reach.

Cisco is patching so many bugs at once because, like other major technology vendors, it now releases its security updates on pre-set days. This makes it easier for IT staff to plan its patching.

Cisco's updates come on the fourth Wednesday of March and September each year, meaning that the next IOS patches are due March 24, 2010.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Cisco, Cisco Systems, etwork
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: bugs, Cisco, exploits and vulnerabilities, routers, security, unified communications
Latest Blog Posts
Whitepapers
  • Securing SOA and Web Services with Oracle Enterprise Gateway
    Companies worldwide are actively deploying service-oriented architecture (SOA) infrastructures using web services, both in intranet and extranet environments. While web services offer many advantages over traditional alternatives (e.g., distributed objects or custom software), deploying networks of interconnected web services still presents key challenges, especially in terms of security and management.
    Learn more »
  • IBM zEnterprise System Brings Hybrid Computing Capabilities to Midsize Organisations
    This paper focuses on the IBM z114 cross-tier solution, which brings IBM AIX Unix and Linux workloads into the mix, with Microsoft Windows support to follow in the future. This blended approach to computing allows workloads running on any of those operating systems to communicate more quickly and effectively with the System z, producing business benefits from the orchestration, or coordination, of management for all of the workloads running across all of the linked platforms.
    Learn more »
  • Achieve Business and Environmental Goals
    HP Web Jetadmin software offers business intelligence capabilities, as part of the Database Connectivity Module, that help IT managers assess printing behaviors and lower their organization’s environmental footprint. HP Eco Solutions reports enable measurement of environmentally relevant capabilities, settings and use patterns. IT can use the results to spotlight opportunities to decrease energy and paper consumption—for a printer, group of printers or an entire fleet. Read more.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments