• info
• discussion
• exploit
• solution
• references

Cisco ONS Platform Vulnerabilities

Solution:
Cisco has released various fixes to address these issues.

The TFTP issue is fixed in the following releases:

15327 - 4.1(3) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(3) and later
5600 - 1.3(0) and later, 1.1(0) and later

The ACK denial of service is fixed in the following releases:

15327 - 4.1(1) and later, 4.0(2) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(1) and later, 4.0(2) and later

The locked-out superuser access issue is fixed in the following releases:

15327 - 4.1(3) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(3) and later
15600 - 1.1(1), 5.0 and later (pending release)

Further details on obtaining fixes may be found in the attached advisory.