A vulnerability has been reported in CiscoWorks Monitoring Center for Security and CiscoWorks Management Center for IDS Sensors (IDSMC), which can be exploited by malicious people to spoof certain information.

The vulnerability is caused due to an error in the SSL certificate checking functionality and can be exploited to spoof a Cisco Intrusion Detection Sensor (IDS) or Cisco Intrusion Prevention System (IPS).

Successful exploitation may make it possible to gather login credentials, submit false data to IDSMC and Secmon, or filter legitimate data from IDSMC and Secmon.

The vulnerability affects the following versions (prior versions are not vulnerable):
* IDSMC versions 2.0 and 2.1.
* CiscoWorks Monitoring Center for Security versions 1.1 through 2.1.

Solution
Apply Service Pack 1 for IDSMC 2.1 and Security Monitor 2.1.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Jan Bervar.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sa-20050824-idsmc.shtml

Deep Links
Links available to Secunia VIM customers