FYI...

"Cisco has released two updates to their products to address low to medium severity risks."
- http://atlas.arbor.net/briefs/index#-569328674
January 23, 2008

Title: Cisco PIX and ASA Time-to-Live Vulnerability
Severity: Elevated Severity ( http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0028 )
> http://www.cisco.com/en/US/products/produc...08093942e.shtml

Title: Cisco Default Passwords in the Application Velocity System
Severity: Normal Severity ( http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0029 )
> http://www.cisco.com/en/US/products/produc...080939431.shtml

- http://isc.sans.org/diary.html?storyid=3878
Last Updated: 2008-01-24 01:17:54 UTC

- http://www.us-cert.gov/current/#cisco_rele..._advisories_to3
January 23, 2008

.

This post has been edited by AplusWebMaster: Jun 10 2008, 02:32 PM

FYI...

Cisco Unified Communications Manager IP Phone PAB Information Disclosure
- http://secunia.com/advisories/34238/
Release Date: 2009-03-12

- http://atlas.arbor.net/briefs/index#-297480716
March 16, 2009

- http://www.cisco.com/warp/public/707/cisco...1-cucmpab.shtml
2009 March 11
The following products are vulnerable:
• Cisco Unified CallManager 4.1 versions
• Cisco Unified Communications Manager 4.2 versions prior to 4.2(3)SR4b
• Cisco Unified Communications Manager 4.3 versions prior to 4.3(2)SR1b
• Cisco Unified Communications Manager 5.x versions prior to 5.1(3e)
• Cisco Unified Communications Manager 6.x versions prior to 6.1(3)
• Cisco Unified Communications Manager 7.0 versions prior to 7.0(2)

- http://web.nvd.nist.gov/view/vuln/detail?v...d=CVE-2009-0632
Last revised: 03/12/2009
CVSS v2 Base Score:9.0 (HIGH)

Cisco Security Advisories
>> http://www.cisco.com/en/US/products/produc...es_listing.html
"Starting on March 26, 2008, Cisco will release bundles of IOS Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.
This schedule change will not restrict us from promptly publishing an individual IOS Security Advisory for a serious vulnerability which is publicly disclosed or for which we are aware of active exploitation..."



This post has been edited by AplusWebMaster: Mar 17 2009, 05:32 AM