The Channel logo


By | John Leyden 25th September 2008 08:52

Cisco's dirty dozen fight IOS flaws

Patches for the masses

Cisco has posted a bumper crop of 12 security advisories covering flaws in its IOS software and related networking kit.

The vulnerabilities create a route for skilled hackers to crash vulnerable systems or obtain sensitive information, among other exploits. Login credentials are not needed to carry out the majority of the attacks.

No one flaw stands out from the batch, but there is a broad theme. Flaws in how Cisco's software processes particular network protocol traffic, such as MPLS or SIP, can cause devices such as VPN appliances to crash.

Altogether the patch batch should equate to "no questions asked" overtime requests from sysadmins and ISP staffers, in particular.

A full summary of the patches can be found on Cisco's website here. The vulnerabilities were addressed in the second round of Cisco's biannual IOS security roundup. The network giant adopted the six-monthly patch cycle back in March as a way of making life easier for sysadmins. ®

comment icon Read 3 comments on this article alert Send corrections


Frank Jennings

What do you do? Use manual typwriters or live in a Scottish croft? Our man advises
A rusty petrol pump at an abandoned gas station. Pic by Silvia B. Jakiello via shutterstock

Trevor Pott

Among other things, Active Directory needs an overhaul
Baby looks taken aback/shocked/affronted. Photo by Shutterstock

Kat Hall

Plans for 2 million FTTP connections in next four years 'not enough'
Microsoft CEO Satya Nadella


League of gentlemen poster - Tubbs and Edward at the local shop. Copyright BBC
One reselling man tells his tale of woe