Cisco content switch SSL vulnerability
  Cisco announced a vulnerability in the 11500 and 11501 content switches with the optional SSL module. 
http://www.cisco.com/warp/public/707/cisco-sn-20050908-css.shtml
The scope appears to be limited. You must be using certificate authentication and the CSS must be the SSL server. In the affected cases if ssl fails to renegotiate a session at the appropriate time it may be possible to bypass authentication. Those using SSL are strongly encouraged to upgrade as soon as possible.
    
http://www.cisco.com/warp/public/707/cisco-sn-20050908-css.shtml
The scope appears to be limited. You must be using certificate authentication and the CSS must be the SSL server. In the affected cases if ssl fails to renegotiate a session at the appropriate time it may be possible to bypass authentication. Those using SSL are strongly encouraged to upgrade as soon as possible.
Keywords: 
0 comment(s)
  
  ×
  
  
  
  
Diary Archives
        
              
Comments