Cisco Releases Security Documents for Vulnerabilities

Cisco has released security documents in reponse to two vulnerabilities.

Cisco Security Advisory 99837 was released in response to a vulnerability in Cisco Security Agent for Microsoft Windows.  This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

Cisco Security Response 100240 was released in response to a vulnerability in CiscoWorks Server.  This vulnerability may allow an attacker to inject malicious script into a web pages by enticing a user to follow a specially crafted URL.

US-CERT encourages users to do the following:

• Review Cisco Security Advisory 99837
• Review Cisco Security Response 100240
• Apply software updates and workarounds provided by Cisco
• Do not follow unsolicited links