[c-nsp] Cisco Security Advisory: Cisco WAAS Mobile Remote Code Execution Vulnerability
Cisco Systems Product Security Incident Response Team
psirt at cisco.com
Wed Nov 6 11:20:01 EST 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Cisco Security Advisory
Cisco WAAS Mobile Remote Code Execution Vulnerability
Advisory ID: cisco-sa-20131106-waasm
Revision 1.0
For Public Release 2013 November 6 16:00 UTC (GMT)
+------------------------------------------------------------------
Summary
=======
Cisco Wide Area Application Services (WAAS) Mobile contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the Cisco WAAS Mobile server with the privileges of the Microsoft Internet Information Services (IIS) web server.
Cisco has released free software updates that address this vulnerability. This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-waasm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (SunOS)
iFcDBQFSekRGUddfH3/BbToRCN00AQCADPIVyRY3IlQWUP8airNTGgvEoUSldfEV
7PSc77PgsQD+NAhj1b/5GuHgYgGGGB3ue79dG6wNmAkkb48RJ5Eehs8=
=C2oN
-----END PGP SIGNATURE-----
More information about the cisco-nsp
mailing list