All four of these bugs are, or will be, fixed in the software releases listed in the table below. Many Cisco software images have been or will be specially reissued to correct this vulnerability. In every case, these special releases are one-time spot fixes, and will not be maintained. Note that fixes are not yet available for some affected releases. Cisco is releasing this notice before the general release of fixed software because of the possibility that this vulnerability may be exploited in the interim.
All fix dates in the table are estimates and are subject to change.
In field test. Getting Fixed Software Cisco is offering free software upgrades to remedy this vulnerability for all affected customers. Customers with service contracts may upgrade to any software version. Customers without contracts may upgrade only within a single row of the table above, except that any available fixed software will be provided to any customer who can use it and for whom the standard fixed software is not yet available. As always, customers may install only the feature sets they have purchased.