topic Thanks all, will look to in Network Access Control

Ghost Vulnerability patching confusion

Tim Hamblin — Mon, 11 Mar 2019 05:34:07 GMT

Hi all,

We are currently running ACS v5.4 and were looking to go to patch 7 initially to combat shellshock.

Then GHOST came along so we waited for Cisco's advisory on the best version to go to.

This has now come out and the advisory is less than helpful!!! - https://tools.cisco.com/bugsearch/bug/CSCus68826

On one habd it seems to say 5.4 is good and on the other that all versions are vulnerable!

Can anybody clarify what patch/version we need to negate the vulnerability please 🙂

Document is too confusing!!!

Tim

Kanwaljeet Singh — Sun, 22 Mar 2015 15:01:44 GMT

Hi Tim,

I have double checked and all 5.x versions are affected. The fixes are not available for 5.4 or 5.3 but 5.5 and 5.6. Kindly upgrade to get the fixes.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

mohanak — Mon, 23 Mar 2015 11:17:50 GMT

Install the latest patches 5.5 Patch 8 and 5.6 patch 3.

Tim Hamblin — Wed, 25 Mar 2015 10:08:47 GMT

Thanks all, will look to upgrade 🙂