resource center
  See your link here
|
IDG News Service -
Networking equipment maker Cisco Systems Inc. is warning customers about security holes in two products that provide user authentication and authorization services for network devices such as firewalls and routers.
The company issued a security advisory yesterday identifying "multiple denial-of-service- and authentication-related vulnerabilities" in two products: the Cisco Secure Access Control Server for Windows (Windows ACS) and Cisco Secure Access Control Server Solution Engine (Secure ACS). The vulnerabilities could allow attackers or malicious users to crash the ACS products or gain unauthorized access to network devices.
ACS products centralize user identity management for other Cisco products and management applications, allowing administrators to manage and enforce access policies that control who can log into a network.
Cisco found that both the Secure ACS and ACS Windows products stopped responding to new TCP connections after being flooded with TCP connections on Port 2002. The DoS condition hampered the ability of the ACS devices to process authentication requests and required the ACS devices to be rebooted to restore authentication services, Cisco said.
In other instances, Cisco found that, under certain circumstances attackers that faked (or "spoofed") the network address of a computer that is accessing the ACS administrative user interface could access that interface without being asked to log in first, Cisco said.
Cisco released product upgrades for ACS Windows Versions 3.2 and 3.3 and for the ACS Solution Engine. The company recommended that customers with service contracts obtain the updates using the Cisco Product Upgrade Tool or by contacting Cisco's technical assistance center.
IDG.net
Can Heuristic Technology Help Your Company Fight Viruses?
What is Heuristic Technology and how can it help safeguard your business against viruses? Learn more.
Eradicate Spam & Gain 100% Asurance of Clean Mailboxes
Get this paper now!
Effectively Implementing Datacenter Automation
Effectively select and deploy the best datacenter automation solution today!
Mastering eDiscovery: The IT Manager's Guide to Preservation, Protection & Production
Get this paper now!
Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.
Not Just Words: Enforce Your Email and Web Acceptable Usage Policies
Get this paper now!
Security Pathways to Less Complexity
Find pathways to security solutions, possibly peace of mind about your information security.
Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.
Sign up to receive updates on the latest Security resources
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDC
IDG
IDG Connect
IDG Knowledge Hub
IDG TechNetwork
IDG Ventures
IDG.net
InfoWorld
ITwhitepapers
ITworld
JavaWorld
LinuxWorld
Macworld
Network World
PC World
The Industry Standard
Copyright © 1994 - 2009 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission ofComputerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc. |
