topic Vulnerabilty CSS in Application Networking

Vulnerabilty CSS

c.vergara — Mon, 22 Mar 2004 14:17:21 GMT

The vulnerabilty:

Apply to the train 4.x ?

regards.

Gilles Dufour — Mon, 22 Mar 2004 15:32:07 GMT

4.01 is affected as well.

3.x is not.

Gilles.

c.vergara — Mon, 22 Mar 2004 16:44:39 GMT

Excuseme my insistence, I have some CSSs with the followiing version:

4.01 Build 49

5.00 Build 29

5.00 Build 69

5.00 Build 45

5.02 Build 3

5.03 Build 15

So, these release are afffect, is it right ?

Gilles Dufour — Tue, 23 Mar 2004 09:22:14 GMT

if you have the command 'app-udp' available in this softwares than you are affected.

This is just if you want to be 100% sure.

Because I can already tell you all these images are affected.

Also don't forget the attack can only come on the management interface.

It is not always being used and if it is, it should normally restricted to internal user.

Gilles.