Cisco Management Center for IPS Sensors Configuration Download Weakness

Bugtraq ID:	15269
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 01 2005 12:00AM
Updated:	Nov 01 2005 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco SDM Cisco PIX/ASA IDS 0 Cisco IPS 4200 Series Sensors Cisco IOS IDS 0 Cisco IOS CLI 0 Cisco IDS Network Module (NM-CIDS-K9) Cisco IDS MC Cisco Catalyst 6500/7600 (IDSM-2) Module Cisco ASA (AIP) Security Services Module
Not Vulnerable:

Cisco Management Center for IPS Sensors Configuration Download Weakness

Cisco Management Center for IPS Sensors is prone to an issue that may cause some IPS signatures to be disabled during deployment.

Cisco IOS IPS devices configured by IPS MC 2.1 are prone to this issue. Cisco IDS/IPS solution, configured by either Cisco IPS MC v2.1, Cisco IDS MC, Cisco SDM or by using the Cisco IOS CLI are vulnerable as well.

Cisco Management Center for IPS Sensors Configuration Download Weakness

An exploit is not required.

Cisco Management Center for IPS Sensors Configuration Download Weakness

Solution:
Cisco has released advisory 68065 to address this issue. Please see the referenced advisory for more information about obtaining fixes.


Cisco IDS MC

• Cisco CSCOids2.1.0-sol-CSCsc336961.tar
  For IPS MC v2.1 running on the Solaris operating system
  http://www.cisco.com/pcgi-bin/tablebuild.pl/mgmt-ctr-ids-app


• Cisco idsmdc2.1.0-win-CSCsc336961.tar
  For IPS MC v2.1 running on the Windows operating system
  http://www.cisco.com/pcgi-bin/tablebuild.pl/mgmt-ctr-ids-app

Cisco Management Center for IPS Sensors Configuration Download Weakness

References:

• Document ID: 68065 - Cisco IPS MC Malformed Configuration Download Vulnerability (Cisco)