The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ciscoworks_management_center_for_ips_sensors | Cisco | 2.1 (including) | 2.1 (including) |
References
- http://secunia.com/advisories/17397
- http://securityreason.com/securityalert/137
- http://securitytracker.com/id?1015133
- http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml
- http://www.kb.cert.org/vuls/id/154883
- http://www.osvdb.org/20444
- http://www.securityfocus.com/bid/15269
- http://www.vupen.com/english/advisories/2005/2266
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22926
- http://secunia.com/advisories/17397
- http://securityreason.com/securityalert/137
- http://securitytracker.com/id?1015133
- http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml
- http://www.kb.cert.org/vuls/id/154883
- http://www.osvdb.org/20444
- http://www.securityfocus.com/bid/15269
- http://www.vupen.com/english/advisories/2005/2266
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22926