This could allow malicious users to use the Document Object Model to gain access to files on a vulnerable machine. Guninski reports that fixing the problem is not as easy as turning off Active Scripting. Click here for a demonstration of the problem. Local users could override their privileges and gain access to administrator rights. This could allow an unauthorized user to uninstall the product.
Cisco recommends upgrading affected systems as soon as possible.
Click here for more information and to see which versions are affected. 3.50.7 and earlier contain a vulnerability that allows a local user to easily obtain root privileges. Generic-NQS is a queuing system for running a batch process across multiple machines. The software is said to prevent attackers from smashing the return address and taking control of the flow of a running program. Security and Bug Patch Alert archive Past newsletters.