Gladiator Research and Security

GSA Reference Number: AD080327-01

Simply Put: Cisco has announced five vulnerabilities in their Cisco IOS (Cisco IOS is the operating system that most Cisco devices run, including all routers and switches). Gladiator is recommending customers upgrade their Cisco routers and switches to the latest IOS version. The first four vulnerabilities deal with issues that can lead to loss of service. The final vulnerability deals with possible data leakage. For a comprehensive list of affected IOS versions and recommended patched IOS versions refer to the Cisco article linked below in the Software Versions and Fixes section. To determine the version your Cisco switch or router is running, log in to a terminal session and run “show version” without the quotes. Then refer to the advisory in the reference link section to apply the correct IOS version.

GSA Reference Number: AD080317-01

Simply Put: Alt-N MDaemon’s IMAP Server is vulnerable to a remote buffer overflow. The IMAP server’s FETCH command does not perform boundary checking on user input. Successful exploitation could result in compromise of the affected system.