Gladiator Research and Security

GSA Reference Number: AD111012-01

Simply Put: Cisco has released an advisory for multiple vulnerabilities with Cisco ASA 5500 devices.  This advisory identifies three new denial of service vulnerabilities and one new authentication bypass vulnerability.  An update from Cisco is available to address these issues and should be applied as soon as possible.  Gladiator will be testing this update for compatibility and stability and will then notify affected clients if an update is necessary.

Microsoft has announced eight new patches today, including six that could allow remote code execution.  Two patches are rated Critical by Microsoft and affect Microsoft Windows, Internet Explorer, the Microsoft .NET Framework, and Microsoft Silverlight.  Gladiator recommends you apply MS11-078 and MS11-081 due to the risk of remote code exploitation.  Detailed information regarding the patches can be found in Microsoft’s October Security Bulletin.