Vulnerability Bulletins |
Ejecución de comandos FTP en Cisco VPN 3000 series |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Integridad |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Networking |
| Affected software | Cisco VPN 3000 series concentrators 3005, 3015, 3020, 3030, 3060, 3080 / < 4.1, 4.1.x <= 4.1(7)L, 4.7.x <= 4.7(2)F |
Description |
|
|
Se ha descubierto una vulnerabilidad en concentradores VPN de la serie Cisco VPN 3000. La vulnerabilidad reside en dos errores en la interfaz de gestión FTP. Un atacante remoto podría ejecutar ciertos comandos FTP y borrar ficheros en el concentrador. |
|
Solution |
|
|
Actualización de software Cisco VPN 3000 Series Concentrators / 4.1(7)M, 4.7(2)G http://www.cisco.com/pcgi-bin/tablebuild.pl/vpn3000-3des?psrtdcat20e2 |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
Cisco Security Advisory (71141) http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-08-28 |