About Tim Glen

Tim Glen · 02-05-2018

@JRDIAZ758 The slides from the Recon Conference are now public and I imagine exploit tools are being...

Tim Glen · 02-05-2018

The slides from the Recon Conference are now public and I imagine exploit tools are being created ri...

Tim Glen · 02-05-2018

I agree with TAC that 9.6(1) is vulnerable. As of this weekend, slides have been made available that...

Tim Glen · 02-01-2018

@JazzyJ wrote: Just out of curiosity you mention "your environment", are you running multiple contex...

Tim Glen · 02-01-2018

JazzyJ I don't believe that is accurate. That Field Notice is HERE. Leo also mentioned the Bug is HE...

Tim Glen · 02-01-2018

Please see this link. https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-app...

Tim Glen · 01-31-2018

Why not just use 9.6(4)? In my environment we need to do extensive reviews of known & fixed bugs, ne...

Tim Glen · 01-31-2018

No prob, please mark Helpful and Solved! Then prepare for the upgrade!

Tim Glen · 01-31-2018

I agree that Cisco needs to get it together. There is an obvious disconnect between the Bug Known Fi...

Tim Glen · 01-31-2018

Is your Transport IKEv2 for AnyConnect clients? You can check this with this command show runn | inc...

Tim Glen · 01-31-2018

I agree 9.9(1.2) is not available. I agree that CSCvg35618 is not listed as fixed in the ASA 9.9(1) ...

Tim Glen · 01-31-2018

Be sure too look at the Interim Releases, see screen shot below.

Tim Glen · 01-31-2018

I see that. The bug states 9.9(1) is Known Fixed. The PSIRT states 9.9(1.2) is First Fixed, however ...

Tim Glen · 01-31-2018

This is great!! (sarcasm).... The Interim Release Notes for 9.8.2 show that CSCvg35618 was fixed in ...

Tim Glen · 01-31-2018

Yes, you need to upgrade, the first fixed release in that code train is 9.1(7.20). Regards

Date Registered	‎03-20-2005 05:45 PM
Date Last Visited	‎01-28-2020 09:31 AM
Total Messages Posted	150
Total Helpful Votes Received	271

Re: CSCvg35618 - Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability