bugtraq - Cisco Security Advisory: Multiple Vulnerabilities in Cisco NX-OS-Based Product

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-id: <201304241203.6.nxosmulti@psirt.cisco.com>
Date: Wed, 24 Apr 2013 12:03:24 -0400
From: Cisco Systems Product Security Incident Response Team <psirt@...co.com>
To: bugtraq@...urityfocus.com
Cc: psirt@...co.com
Subject: Cisco Security Advisory: Multiple Vulnerabilities in Cisco NX-OS-Based Product 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Multiple Vulnerabilities in Cisco NX-OS-Based Products

Advisory ID: cisco-sa-20130424-nxosmulti

Revision 1.0

For Public Release 2013 April 24 16:00  UTC (GMT)
+---------------------------------------------------------------------

Summary
=======

Cisco Nexus, Cisco Unified Computing Systemn (UCS), Cisco MDS 9000 Series Multilayer Switches, and Cisco 1000 Series Connected Grid Routers (CGR) are all based on the Cisco NX-OS operating system.  These products are affected by one or more of the following vulnerabilities:

  * Multiple Cisco Discovery Protocol Vulnerabilities in Cisco NX-OS-Based Products
  * Cisco NX-OS Software SNMP and License Manager Buffer Overflow Vulnerability
  * Cisco NX-OS Software SNMP Buffer Overflow Vulnerability
  * Cisco NX-OS Software Jumbo Packet Denial of Service Vulnerability

Cisco has released free software updates that address these vulnerabilities.
 
This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: GPGTools - http://gpgtools.org

iF4EAREIAAYFAlF2hu0ACgkQUddfH3/BbTpaRAD/cDJ4yMgrDztLEXyQNHlroTHx
bU8wQibE5AECpq33bK0A/1r8T6bj2KmzBpgZP59rEaVq2aDGKZPcn+mQL8gO8d+0
=rkOO
-----END PGP SIGNATURE-----