Boletines de Vulnerabilidades

Cisco Intrusion Prevention System Key Regeneration HTTPS Denial of Service Vulnerability
Información sobre el sistema

Software afectado	Cisco
Descripción
A vulnerability in the SSL/TLS subsystem used by the web management interface of Cisco Intrusion Prevention System (IPS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerability is due to a potential race condition while regenerating the affected devices cryptographic certificate and keys during an upgrade to image 7.2 or later from an image prior to 7.2. An attacker could exploit this vulnerability by negotiating a number of HTTPS More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150220-CVE-2015-0631?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Intrusion%20Prevention%20System%20Key%20Regeneration%20HTTPS
Identificadores estándar
Propiedad	Valor
CVE	CVE-2015-0631.