In the absense of any further info on this vulnerablility, is it safe to 
simply rename the file until instructions are published on how to 
mitigate it?

It's been a few days now and nothing more has come of this issue that 
I'm aware of.

Thanks,

-- 

   MARK WOODS, CCNA, CISSP
   IT/Networking
   Miami University
   Oxford, OH


Atif Azim (atif) wrote:
> Folks,
> 
> CCA engineering is investigating this issue. The issues mentioned seem
> to stem from deprecated jsp pages that are no longer used. We will
> provide instructions shortly on how this can be mitigated.
> 
> Note that if your CAM is protected by a firewall or by ACLs at your
> router you are not at risk.
> If your CAM does not have such protection we recommend that you do put
> such access controls in place.
> 
> If you have any emergency or would like further help in the meantime
> please contact me directly.
> 
> Regards,
> Atif
>  
> 
> -----Original Message-----
> From: Perfigo SecureSmart and CleanMachines Discussion List
> [mailto:[log in to unmask]] On Behalf Of Anthony Maszeroski
> Sent: Friday, December 16, 2005 1:01 PM
> To: [log in to unmask]
> Subject: DoS possibilities in the Cisco Clean Access product line
> 
> Link : <http://www.awarenetwork.org/forum/viewtopic.php?p=2236>
> Link : <http://www.securityfocus.com/archive/1/419645>
> 
> --
> - Anthony Maszeroski
> -----------------------------------
> Network Security Specialist
> The University of Scranton
> email : [log in to unmask]
> phone : 570-941-4226
> -----------------------------------
>