Cisco warns of vulnerability in CDS

Cisco has released a security advisory warning of a flaw in the company's Content Delivery System.

The company said that the Internet Streamer application was vulnerable to a web-based attack that could allow an attacker to remotely access a targeted system.

Cisco said that a successful attack could allow an attacker to access sensitive administrative components such as password files and system logs, potentially leaving the system vulnerable to future attack from the compromised accounts.

All versions of the Internet Streamer application are believed to be vulnerable to attack.

The company has included a patch to address the vulnerability in the latest versions of Content Delivery System. Administrators are being advised to update to version 2.5.7 or later to protect against the attack.

Those who have not yet installed the update can guard against the attack by setting service rules to deny access to sensitive files through the system manager tool.