topic Re: Urgent - CSS vulnerability in Application Networking

Urgent - CSS vulnerability

cjrchoi11 — Thu, 04 Mar 2004 22:08:23 GMT

I'm looking the security Vulnerability for CSS.

http://www.cisco.com/warp/public/707/cisco-sa-20040304-css.shtml

The doc describes "vulnerability exists even when the Network Proximity feature is not configured".

Do I need code upgrade even I don't have the Network Proximity feature on the CSS ? Is this mendatory ?

Thanks,

Re: Urgent - CSS vulnerability

didyap — Wed, 10 Mar 2004 17:32:54 GMT

I guess the app-udp was done for proximity. Although the proximity feature is not configured, the releases would be vulnerable and that is what the document mentions too. It would be safer for you to upgrade.

Re: Urgent - CSS vulnerability

mvoight — Sat, 13 Mar 2004 06:41:55 GMT

You still face the vulerability, even without Network Proximity. However, if you don't use the Ethernet management port, there is no vulnerability. The only port that can be attacked by this is the Management inteface.

Re: Urgent - CSS vulnerability

c.vergara — Thu, 18 Mar 2004 22:36:16 GMT

Hi, about this vulnerability, I have two CSS11051 with the following maintanance releases:

1) 5.03 build 15

2) 5.00 build 45

Are these releases affect ?

regards.