[ news_security_news ]
Cisco Says VPN Vulnerable
John Stith
Staff Writer
2006-01-31
 Insider Reports RSS Feed
Cisco Systems warned on Friday via a security advisory of a vulnerability in its VPN 3000 Series concentrators. They said the vulnerability could allow a hacker to send a crafted HTTP packet that would result in a denial-of-service attack.
For affected customers, Cisco offered up software that should address the problem as well as workaround. Information week said, "The HTTP used for this type of Web-based management interface is activated by default on the VPN 3000 concentrators, but Cisco recommends disabling it to mitigate the vulnerability. With HTTP disabled, the concentrator can be configured to use HTTPS (HyperText Transfer Protocol Secure). HTTPS must be enabled before disabling HTTP.
The affected concentrators include versions 4.7.0 through 4.7.2.A of the equipment's software. As with any other similar issues, the warning goes out to make sure everything is updated with all the latest patches and fixes.
Add to | DiggThis| Yahoo My Web
About the Author:
John is a staff writer for SecurityProNews covering cyber security.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
