Vulnerabilty CSS

c.vergara · ‎03-22-2004

The vulnerabilty:

Apply to the train 4.x ?

regards.

Gilles Dufour · ‎03-22-2004

4.01 is affected as well.

3.x is not.

Gilles.

c.vergara · ‎03-22-2004

Excuseme my insistence, I have some CSSs with the followiing version:

4.01 Build 49

5.00 Build 29

5.00 Build 69

5.00 Build 45

5.02 Build 3

5.03 Build 15

So, these release are afffect, is it right ?

Gilles Dufour · ‎03-23-2004

if you have the command 'app-udp' available in this softwares than you are affected.

This is just if you want to be 100% sure.

Because I can already tell you all these images are affected.

Also don't forget the attack can only come on the management interface.

It is not always being used and if it is, it should normally restricted to internal user.

Gilles.