Cisco Systems
Cisco has warned of vulnerabilities in IOS 11.3, 12.0, 12.1, 12.2, 12.3 and 12.4

Cisco warns of IOS security flaws

Vulnerability could open door for network attacks

Written by Shaun Nichols in California

Cisco Systems has warned administrators that several of the company's routers and switches could be vulnerable to attack. 

The vulnerabilities lie within a little-used component in IOS, an operating system used to control Cisco's networking hardware.

IOS 11.3, 12.0, 12.1, 12.2, 12.3 and 12.4 all contain the vulnerability. The latest version of the software, IOS XR, is not affected.

An attacker could remotely exploit flaws in the FTP Server component of IOS to break into a network and steal data or execute malicious code. FTP is a protocol used to transfer files over a network.

IOS FTP Server is not enabled by default, and is usually used only to manage FTP servers. Cisco has issued an update that disables the component, but users can also manually disable FTP Server within IOS.

Cisco said that the offending component will be removed in all future IOS releases and will possibly be replaced by new FTP software at a later date.

The company recommends users to switch to IOS Secure Copy or Trivial File Transfer Protocol systems to transfer files.

Secunia rated the vulnerability 'moderately critical', the third of its five severity levels. 

The security firm noted that, while the vulnerabilities allow attackers to view files and remotely execute code, the affected component is not enabled by default.

Tags:

reader comments

related articles

US military puts router in space

Satellite system test could herald revolution in communications 13 Apr 2007

 

Network operators fuel telecoms kit bonanza

Sales forecast to rise 20 per cent over the next three years 23 Apr 2007

Cisco in $3.2bn WebEx acquisition

Networking giant makes second deal of the week 16 Mar 2007

Cisco buys storage virtualisation firm NeoPath

Products geared towards existing storage systems 15 Mar 2007

Cisco adds 3G wireless to routers

Devices allow for wireless networking and backup systems 29 Mar 2007

Microsoft pushes out 17 security fixes

'Critical' patches for Windows, Office and Internet Explorer 13 Feb 2008

Microsoft warns of new Word attacks

Remote code flaw being exploited 10 Jul 2008

Microsoft readies four patches

Only one 'critical' fix included in monthly update 11 Sep 2007

today's top stories

Analysis: The true cost of printing

Organisations need to get a better sense of how much they spend on printing before finding ways to reduce it 05 Sep 2008

Computing podcast 4 September 2008

Find out what Michael Dell told Computing, and listen to our take on the latest browser wars 04 Sep 2008

Looking to the future - exclusive Michael Dell interview

Dell's chief executive talks to Computing about the way the company continues to adapt to major changes in the industry 04 Sep 2008

Interview: Delivering power where it's needed at Betfair

The online gambling firm is putting its money on grid computing and virtualisation to underpin global expansion 04 Sep 2008

E-paper displays are an open book

A display revolution is on the way - but only once the user interface issues are solved 04 Sep 2008

Most commented stories

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you use a mobile phone as an alternative to cash?

Would you use a mobile phone as an alternative to cash?

When mobile phones include inbuilt payment technology - would you use one instead of cash?

Previous poll results

Latest audio and video articles

BlackBerry BoldVideo

Video Review: BlackBerry Bold

Technology editor Daniel Robinson takes a hands-on look at the latest device from Research in Motion 01 Sep 2008

Podcast imageAudio

Computing podcast 4 September 2008

Find out what Michael Dell told Computing, and listen to our take on the latest browser wars 04 Sep 2008

Latest in-depth articles

A meetingAnalysis

Turning adversity into an advantage

IT chiefs under pressure to make cost cuts can turn the situation to their benefit 04 Sep 2008

CloudAnalysis

How to introduce cloud computing into your organisation

Best practice advice from Forrester Research 04 Sep 2008

Primary Navigation