Cisco Cisco IOS Software Release 12.4(23) Notas de publicación

CSCsg16908

Multiple vulnerabilities exist in the Cisco IOS File Transfer Protocol (FTP) Server feature. These 
vulnerabilities include Denial of Service, improper verification of user credentials and the ability to 
read or write any file in the device’s filesystem, including the device’s saved configuration, which 
may include passwords or other sensitive information.

The Cisco IOS FTP Server is an optional service that is disabled by default. Devices that are not 
specifically configured to enable the Cisco IOS FTP Server service are unaffected by these 
vulnerabilities.

This vulnerability does not apply to the Cisco IOS FTP Client feature.

This advisory is posted at 

.

CSCsg18933

Symptoms: A RIP route is learned from a RIP neighbor via a dialer interface (or other virtual 
interface type). When the neighbor disconnects and the interface goes down, the RIP route is 
removed from the RIP database. However, the RIP route remains in the routing table.

Conditions: 

RIP is configured with the no validate-update-source command. 

RIP routes are learned via a virtual interface. 

The virtual interface is using a negotiated address. 

The problem is platform-independent.

Workaround: Use the clear ip route command to remove the affected routes from the routing table. 

CSCsg28628

Symptoms: NAS pkg asynchronous calls fail after a redundancy switchover has occurred, and the 
following error message is generated:

Modems unavailable

Conditions: This symptom is observed on a Cisco AS5850 that functions in RPR+ mode. This 
situation may impact service.

Workaround: There is no workaround to prevent the symptom from occurring. When the symptom 
has occurred, enter the redundancy switchover command a couple of times to restore the 
Cisco AS5850 to normal operation. 

CSCsg84883

Symptoms: NAT configurations are not getting removed. 

Conditions: This symptom is observed on a Cisco 7200 series router that is running Cisco IOS 
Interim Release 12.4(12.3)T. 

Workaround: There is no workaround.

CSCek12203

Symptoms: When you enter the copy ftp disk command, the copy operation may fail and cannot be 
terminated, further copy commands may fail, and a TCP vty session for the purpose of 
troubleshooting the situation may fail and cannot be terminated.