cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
457
Views
0
Helpful
1
Replies

CERT 34, 35 (login and ssh) Patches?

seth.leone
Level 1
Level 1

Do the sensors /unix director need to have the latest Sun patches for the ssh or login vulnerabilities....or will these get patched with the 3.0(3) release??

1 Reply 1

kleem
Cisco Employee
Cisco Employee

It will not be in the 3.0(3) release, since we have already done a final build and Sun has not yet released the final patch for Solaris x86. We will bundle the final patch into our next release - 3.1 due out in the Spring.

In the meantime, use sysconfig-sensor to disable telnet access to the box (Secure Communications, Secure Shell Communications, Security level, 2 or 3). Our SSH server does not have this vulnerability.