Cisco Systems on Wednesday warned of several security flaws in its Adaptive Security Appliances (ASA) and PIX firewalls that attackers could use to get around authentication or carry out denial-of-service attacks.
Two of the flaws affect the process of setting up a Lightweight Directory Access Protocol (LDAP) authentication server and could enable an attacker to take over an appliance or gain access to the internal network without logging in, Cisco said in a Thursday advisory.
Two additional vulnerabilities affect devices that are used to terminate VPNs, and could give miscreants the ability to arbitrarily disconnect VPN users and clog up VPN traffic, Cisco said.
Cisco has released an update to address the vulnerabilities. Cisco ASA and PIX security appliances that are running software versions 7.1 and 7.2 may be vulnerable, depending on the type of configuration.
Cisco assigned a CVSS base score of 8 to the LDAP authentication flaws, and scores of 3.3 to each of the denial-of-service vulnerabilities.
Cisco in February patched five vulnerabilities affecting its PIX 500 series and ASA 5500 series security appliances, the most serious of which was a privilege escalation flaw to which the vendor assigned a CVSS base score of 6.5.
|
Symantec's Code Red: The Law Enforcement/Anonymous E-Mail Exchange Law enforcement officials negotiated via e-mail for more than two weeks with an Anonymous group member trying to extort $50,000 from Symantec to keep stolen product code off the Internet. |
|
How To Sell IT Security Services To Your Customers Cyberattacks can cost a business thousands, even millions, of dollars, and can deal a death blow to some. Here's how IT solution providers can help guard against malicious attacks. |
|
Cybersecurity Experts: What They Know Could Scare You A recent report based on interviews with security experts in government, business and academia finds more than half in agreement that a worldwide arms race is taking place in cyberspace. |
 More
Slide Shows |
- Insider Threats: The Next Frontier for Security Resellers and SMBs
- Complete Security and Your Bottom Line: Sophos, Value and the Channel
- Tough Threats, Tougher Security: How You Can Leverage New Solutions To Combat A “Targeted Attack” Landscape
- Dark Clouds Ahead: Why the Mid-Market Needs To Ramp Up Cloud Security and How You Can Help Them Get There
