Примечания к выпуску для Cisco Cisco 4404 Wireless LAN Controller

Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 3.2.215.0

OL-31336-01

Troubleshooting

•

CSCsr74835—incorrect uses of sprintf() in tcp/telnet.c.

•

CSCsw40789—Multiple vulnerabilities exist in the Cisco Wireless LAN Controller (WLC)
platforms. This security advisory outlines the details of the following vulnerabilities:

–

Malformed HTTP or HTTPS authentication response denial of service vulnerability

–

SSH connections denial of service vulnerability

–

Crafted HTTP or HTTPS request denial of service vulnerability

–

Crafted HTTP or HTTPS request unauthorized configuration modification vulnerability

Cisco has released free software updates that address these vulnerabilities. This advisory is posted
at

http://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20090727-wlc.html

•

CSCsx03715—Multiple vulnerabilities exist in the Cisco Wireless LAN Controller (WLC)
platforms. This security advisory outlines the details of the following vulnerabilities:

–

Malformed HTTP or HTTPS authentication response denial of service vulnerability

–

SSH connections denial of service vulnerability

–

Crafted HTTP or HTTPS request denial of service vulnerability

–

Crafted HTTP or HTTPS request unauthorized configuration modification vulnerability

Cisco has released free software updates that address these vulnerabilities. This advisory is posted
at

http://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20090727-wlc.html

•

CSCsx07878—Clients might be unable to log into a WLAN configured for web authentication.

•

CSCsy27708—Multiple vulnerabilities exist in the Cisco Wireless LAN Controller (WLC)
platforms. This security advisory outlines the details of the following vulnerabilities:

–

Malformed HTTP or HTTPS authentication response denial of service vulnerability

–

SSH connections denial of service vulnerability

–

Crafted HTTP or HTTPS request denial of service vulnerability

–

Crafted HTTP or HTTPS request unauthorized configuration modification vulnerability

Cisco has released free software updates that address these vulnerabilities. This advisory is posted at

http://www.cisco.com/c/en/us/support/docs/csr/cisco-sr-20090114-http.html

•

CSCsy44672—Multiple vulnerabilities exist in the Cisco Wireless LAN Controller (WLC)
platforms. This security advisory outlines the details of the following vulnerabilities:

–

Malformed HTTP or HTTPS authentication response denial of service vulnerability

–

SSH connections denial of service vulnerability

–

Crafted HTTP or HTTPS request denial of service vulnerability

–

Crafted HTTP or HTTPS request unauthorized configuration modification vulnerability

Cisco has released free software updates that address these vulnerabilities. This advisory is posted
at

http://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20090727-wlc.html

Troubleshooting

For the most up-to-date, detailed troubleshooting information, refer to the Cisco TAC website at

http://www.cisco.com/c/en/us/support/index.html