2012 年 3 月 28 日

シスコは半期に一度の Cisco IOS ソフトウェアセキュリティアドバイザリバンドル公開を 2012 年 3 月 28 日にリリースしました。お客様のフィードバックに直接対応するため、シスコは毎年 3 月と 9 月の第四水曜日に Cisco IOS ソフトウェアセキュリティアドバイザリのバンドルをリリースしています。この公開には、Cisco IOS ソフトウェアの脆弱性に対処する 9 件のセキュリティアドバイザリが含まれています。それぞれの脆弱性が悪用されるとサービス拒否（DoS）状態の発生につながり、また 1 件では認証されたユーザがその許可レベルを超えてデバイスに対する管理制御権を取得する可能性があります。

Cisco IOS ソフトウェアチェッカーを使用すれば、特定の Cisco IOS ソフトウェアリリースがシスコ製品の脆弱性に該当するかどうかをすばやく判断できます。

Cisco Security
Intelligence Operations

イベントインテリジェンス

以下のテーブルに、この Cisco IOS ソフトウェアセキュリティアドバイザリバンドル公開に関連する Cisco Security Intelligence Operations の内容とシスコの緩和策に関する情報を示します。

Cisco Security Advisory	Cisco Applied Mitigation Bulletin	Cisco IntelliShield Alert	CVE ID	CVSS Base Score
cisco-sa-20120328-zbfw Cisco IOS Software Zone-Based Firewall Vulnerabilities	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Zone-Based Firewall H.323 Inspection Engine Denial of Service Vulnerability	CVE-2012-0388	7.8
		Cisco IOS Software Zone-Based Firewall HTTP Inspection Engine Denial of Service Vulnerability	CVE-2012-0387	7.8
		Cisco IOS Software Zone-Based Firewall Crafted IP Packets Denial of Service Vulnerability	CVE-2012-1310	7.8
		Cisco IOS Software Zone-Based Firewall Session Initiation Protocol Engine Denial of Service Vulnerability	CVE-2012-1315	7.8
cisco-sa-20120328-nat Cisco IOS Software Network Address Translation Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Network Address Translation Session Initiation Protocol Denial of Service Vulnerability	CVE-2012-0383	7.8
cisco-sa-20120328-ike Cisco IOS Software Internet Key Exchange Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Internet Key Exchange Denial of Service Vulnerability	CVE-2012-0381	7.8
cisco-sa-20120328-msdp Cisco IOS Software Multicast Source Discovery Protocol Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Multicast Source Discovery Protocol Denial of Service Vulnerability	CVE-2012-0382	7.1
cisco-sa-20120328-pai Cisco IOS Software Command Authorization Bypass	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software HTTP Request Processing Arbitrary Command Execution Vulnerability	CVE-2012-0384	8.5
cisco-sa-20120328-smartinstall Cisco IOS Software Smart Install Denial of Service Vulnerability	Identifying and Mitigating Exploitation of the Cisco IOS Software Smart Install Denial of Service Vulnerability	Cisco IOS Software Smart Install Denial of Service Vulnerability	CVE-2012-0385	7.8
cisco-sa-20120328-ssh Cisco IOS Software Reverse SSH Denial of Service Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Reverse SSH Vulnerability	CVE-2012-0386	7.8
cisco-sa-20120328-rsvp Cisco IOS Software RSVP Denial of Service Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software RSVP Denial of Service Vulnerability	CVE-2012-1311	7.8
cisco-sa-20120328-mace Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Measurement, Aggregation, and Correlation Engine Denial of Service Vulnerability	CVE-2012-1312	7.1
		Cisco IOS Wide Area Application Services Denial of Service Vulnerability	CVE-2012-1314	7.8

Cisco Security Intelligence Operations に戻る

Cisco Event Response: Semi-Annual Cisco IOS Software Security Advisory Bundled Publication

2012 年 3 月 28 日

イベント インテリジェンス

イベントインテリジェンス