EMI includes older JRE and MySQL versions with known vulnerabilities?

Cisco IME experts,

I just installed IME and noticed that it includes an older version of MySQL 2009-vintage that has known security vulnerabilities.  It also uses a private JRE version which is pretty old (1.6u7, IIRC).  I would use IME, but I have to meet strict safety requirements, and these vulnerable versions of bundled products will raise red flags.  Can I remove the private JRE file and modify the .ini files to point to the 1.6u23 WHAT JRE installed on the system?  MySQL version can be upgraded to > = v5.1.52, or can you explain why it is not a threat to the security of the system?  Certainly, the system running IME is within a protected network, but we try to apply the principles of defense in depth, and attacks can sometimes come from insiders with a flash drive or a CD.  Thanks for your answer in advance!

Martin

IME 7.1.1 will include JRE 1.6u23.  We do not support any change to IME as replacing the JRE, as you suggested.

We entered a bug to make sure that we update the database on a calendar so as they may be updated periodically.  The bug is CSCtn26880.

We believe that the current version of MySQL is not a threat to the security of the system for several reasons:

-The server is configured to accept only local connections.

-There is no default admin login.

-The admin password is unique for each facility and is not available for the user.

However, security can be improved by installing a box of Win 7, given that only admin users will have access to the IME files. This will be available when Windows 7 is supported in IME 7.1 (1).

IME 7.1.1 is expected this month - maybe - even this week.

Tags: Cisco Security

Similar Questions

  • I am a new user. The trial version ch & LR have been donloaded 2 fair days and he was attuned to the monthly plan. However, when open the LR, there all the same show PS with one day left and trial version with 29 days. Please please advise and would l

    I am a new user. The trial version ch & LR were uploaded 2 days ago and just joined the monthly plan. However, when open the LR, there all the same show PS with one day left and trial version with 29 days. Please please Advisor and would like to know if other apps like bridge etc. are included in the plan. Thank you very much.

    Troubleshooting FAQ: What should I do if I have a subscription, but my application acts as if I had a trial?

  • Where can I get a brief history of versions of Firefox, including the current and beta versions?

    I just upgraded to 3.6 to 5.01 and received a message saying that this version is obsolete, and should I upgrade to 6.0. OK, well I would like to know just where, in the history of Firefox, it will take me. This is not the first time I have wondered about the Firefox version history and tried to find the information. Looks like you have all hide information or are ashamed of something (the number of versions, maybe?) and make it difficult to find this information. I don't understand the logic of making this information so difficult to find, if it is available to all.
    (BTW, I'm a software sales engineer retirement for Tivoli/IBM products.)

    Kind regards
    Lynn Larsen

    Is not hidden; not a secret. Relatively easy to find.

    Enter "versions of firefox" (including the quotes) in Google, you can get: https://encrypted.google.com/search?sclient=psy & hl = in & lr = & tbs = qdr % 3Ay & source = hp & q = % 22firefox + releases % 22 & btnG = Search

    • In the "Advanced search" options, I have "Date" set for the year passed

    Second point, releases-MozillaWiki, gives you future versions, current and past.

    You'll see version news on all the 6 weeks, with a few numbers of minor version, if any, as you had with Firefox 3.6.x and earlier versions.

    If this answer solved your problem, please click 'Solved It' next to this response when connected to the forum.

  • I downloaded a new site which includes desktop, Tablet and phone versions.  All three seem to work except that two pages on the version of phone are coming in white well.  Ideas?

    Phone version of my site has two blank pages.  Can't understand why. Rest of them look good and the versions of desktop and tablet won't have any problem.

    Any ideas are appreciated.

    Thank you

    So, I went back into the files of the site and created two new pages. Then I copied all the contents of the two who had been raised as white.  Recharged to Godaddy via FTP and all now work correctly.

    Still don't know what the problem was, but what fixed it.

    DS

  • Include the anchor and image with apex_item.text

    I wonder if it is possible to include an anchor and an image with the apex_item.text function. I tried to use the p_attributes parameter in the function, adding an anchor tag and tag the image. When I discovered the page, I can see the image and the link goes to the page I want, however, to the right of the image I see not what turns out to be my p_item_id parameter. In my case it appear on the page as a id = "f1_1" / > just to the right of the image.
    SELECT apex_item.text(1, ID, 15, 15,
               '<a href="f?p=&APP_ID.:23:&SESSION.::::P23_ID:#ID#" >
                 <img src="#IMAGE_PREFIX#e2.gif" border="0" ></a>',
               'f1_' || ROWNUM, null) ID,
    In addition, the #ID # point the value of the href above URL (f? p = & APP_ID.:23: & SESSION.: P23_ID: #ID #) does not pass the value of the element, rather it passes #ID # as value, any thoughts on how to pass the value of the line in a table would be greatly appreciated.

    Our version of the ApEx is 3.2.1.00.10

    Concerning
    Mark

    Published by: bohnensm on July 12, 2010 12:04

    Published by: bohnensm on July 12, 2010 12:05

    Mark,

    apex_item. Text renders a text field, you try to include your own HTML (image + anchor) code as an attribute of this text field. This will generate incorrect HTML code. Instead you can concatenate the string generated for the text with your HTML code field, i.e. move it out of the text field:

    SELECT Apex_item.text (1, ID, 15, 15, null, 'f1_' |) ROWNUM, null).
    '',
    « f1_ » || ROWNUM ID, null)...

    Kind regards
    Marc

  • Beginning with PHP and MySQL

    Hello

    I'm learning PHP and MySQL to build a dynamic web site. My webhost has very good support and they offer Linux or Windows servers. I've always used Windows servers, but I think on the use of a Linux server for my new web site. (I used asp with an Access database on a Windows Server, but that's the extent of my lats programming at this point).

    Here are my questions: do I need no knowledge of Linux to use as a server for my web site? (The web hosting company will make the configuration and MySQL databases are included by default with Linux servers). Also, there are disadvantages of using Linux?

    Thank you

    Michael

    David,

    Thanks for all the great information. Yes, my hosting company is the latest versions of MySQL and PHP. I have been using Web Strike Solutions for the last 3 years and I have about 10 websites with them. They are always updating their apps and have very good support.

    As by chance, I'm reading your book, "PHP for Dreamweaver. Do you recommend using the Apache server in this book, but I've always been reluctant to work with UNIX or LINUX. But it occurred to me it would not have a large knowledge of Linux, because the host will take care of all configurations. I also looked at your book, PHP Solutions, and this book has achieved nothing else that the stellar reviews on Amazon. After I get my website to the top and go, I intend to order this book as well. I also ordered a few books of Larry Ullman on MySQL and PHP. So, between books and this forum (in the case that I am really stuck), I think I'm in good shape.

    Thanks again!

    Michael

  • I can't save my CS3 because I wonder to identify an older version with serial number which I can't provide. I need help!

    I can't save my CS3 using its serial number. To do this, I wonder to identify an older version with serial number which I can't provide. I desperately need help.

    Robert Gordon

    You can follow the instructions here: PS CS3: cannot save on PC

    If your old product is not on the list, nor is your serial number for it. If you need to reinstall on a new system, and the CS3 upgrade wants a qualification series, it's bad. These series are of a value of $$$ and no registration or registration request in trouble.

    Gene

  • We have site and only works with Firefox 3.0 Setup. so, can we have this version Offline Installer?

    We have site and only works with Firefox 3.0 Setup. so, can we have this version Offline Installer?

    Why is your site, not be able to be consulted in current Firefox?

    Firefox 3.0 is now rather old and vulnerable.

    If you must use a version of Firefox 3.0.x for that one site then try the portable version of Firefox 3.0.12. English is near the bottom of the list.
    http://sourceforge.NET/projects/PortableApps/files/Mozilla Firefox 2% C Portable ed. / Mozilla Firefox Portable edition 3.0.12 %2C.

    ^ copy + paste the url above.

    Installs it portable Firefox is autonomous, that it does not touch your version of Firefox or normal profiles for her.

  • Anyone having problems with messages of script with the new version of GMail and Yahoo Mail? All the others seem fine and no problems with other browsers. With the help of FF25

    Gmail and Yahoo mail are very slow to load. I get a message from the script almost whenever instruct me to continue or to stop the script. Everything I have shut down or restart the browser goes blank and hangs. So, I have to restart Firefox. I followed suggestions on the help pages for the slow e-mail accounts or issues. (cleared cache etc, reset etc.) nothing solves the problem. I only noticed the problem since the first update of FF25. Scripts to stop even on these pages is not acceptable, because you are directed to the pages who insist you must restart scripts. It's a nightmare! Gmail both Yahoomail are very slow to respond to clicks more.

    Your list of details of the system shows that you have a user.js file in the profile folder to initialize some preferences at each start of Firefox.

    The user.js file appears only if you or another software created, therefore, normally, he wouldn't be here.
    You can check its contents with a text editor if you do not create this file yourself.

    The user.js file is read whenever you launch Firefox and initializes the preferences to the value specified in this file, so set of preferences via user.js can be changed temporarily for the current session.

    You can rename or delete the prefs.js file and numbered possible prefs-# .js and the file user.js to reset all default prefs.

    You can use this button to go to the Firefox profile folder:

    • Help > troubleshooting information > profile directory: see file (Linux: open the directory;) Mac: View in the Finder)

    Note that the folder "Application Data" in XP/Win2K and the "AppData" folder in Windows Vista and Windows 7 and later versions are hidden folders.

  • You will need to check on a PC with WinXP OpSys PUP. Could DO with Win98 and earlier versions. HOW can I make WinXP let me control BACK Pup?

    You will need to check on a PC with WinXP OpSys PUP.  Could DO with Win98 and earlier versions.  HOW can I make WinXP let me control BACK PUP?   Acquired CNC machines controlled by PRE - Win.XP PC works fine.  But Win.XP prevents the PUPPY control via simple BACK and GWBASIC.   You want to be able to start/stop all 8 bits of data PUP with BASE and BACK.

    Thank you.   Jan Rowland

    Hey Jan Rowland,

    Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited in the Windows XP Pro on the Technet Forums.

    Post your query in Technet Windows XP IT Pro Forums for assistance on this issue.
  • I need to know the file current date/time number stamp and the version of "spoolsv.exe" in Vista Home Premium 32-bit with SP2.

    I need to know the file current date/time number stamp and the version of "spoolsv.exe" in Vista Home Premium 32-bit with SP2. My spooler file got corrupted and I need to know what that the stamp of date/time on the latest version of the file: spoolsv.exe. I did a search on my hard drive and found 8 copies of the file with 7 different dates. I need to know which copy in my file C:\windows\system32\. I suspect that the problem was caused by some kind of malware. I think that some of the different versions on my machine of the initial installation of the Vista, SP1 and SP2. 3 copies that would explain. I tried all the suggestions in this forum and several others. I tried sfc/scannow and it simply replaces the corrupted file by another. I understand how works this file and a simple copy will do the trick if I knew that the file to use. I know that I don't want to go back to the first version of 2006.  BTW... my symptoms are all my printers have disappeared, and when I try to 'add a new printer' I get an error message saying that my spooler service does not work. When I opened my services window it shows that indeed, he is arrested, but I will not start because the description column contains only the code garbled machine indicating that the file is corrupted, or it may contain a virus. I had been using F-Prot until this virus got by and now I use AVG. I scanned my machine with several cleaning packages and it is is more infected, but I worry that from this corrupt file grow something. I know that the problem is not with my printers or drivers, because everyone on my home network can print on all of my printers. None of the people I know are on Vista 32 bit. They are all running System 7 or XP. I have XP, except that a few years ago I suffered from the "Syndrome of Pepsi" on my laptop and when I bought a new HP, it came with Vista.

    Version 6.0.6002.18294

    Day 17/08/2010

    Duration 14:11

    Duration may vary in different time zones.

  • HostScan Firewall control fails with 8.0 McAfee HIPS Patch 6 (and later versions)

    Hello

    We use a HostScan postural control must (among other things), looking for the active firewall.
    The firewall is McAfee Host Intrusion Prevention 8.x
    He works very well with McAfee 8.0 Patch 5
    However - with McAfee 8.0 Patch 6 (and later versions) it fails.
    'Windows Firewall graphical Support for HostScan 4.2.02075' see the Watch McAfee Host Intrusion Prevention 8.x is supported and it can check the active state.
    I suspect it fails it's because McAfee has changed the implementation of HIPS in the patch 6.
    Contrary to earlier he no longer uses the "McAfee Firewall Core Service".
    While this service is always present the service is not started.
    Someone from Cisco can confirm
    -Version of McAfee HIPS Patch 6 8.0 (or later) have been tested with this review?
    -What is the assessment of endpoint * actually * looking for? (he seeks for the 'McAfee Firewall Core Service' service?)
    -How can we fix / workaround?
    Thank you
    -AL

    Not good news.  Known - issue and Cisco do not plan to fix it.

    https://BST.cloudapps.Cisco.com/bugsearch/bug/CSCuy17396/?referring_site=bugquickviewredir

  • I can't uninstall the old silverlight and replace it with the new version.

    Im trying to uninstall the old version of silverlight and replace it with the new. It won't let me uninstall. Help, please

    Hello

    1 have had any changes made on the computer before the show?

    2. do you get an error message? If Yes, what is the full and exact error message?

    Method 1:

    I suggest you for the link and check if that helps:

    Uninstall previous versions of Silverlight on Windows

    http://www.Microsoft.com/getSilverlight/get-started/install/uninstall-win.aspx

    Also check out the link to install Microsoft Silverlight:

    Download Microsoft Silverlight

    http://www.Microsoft.com/getSilverlight/get-started/install/default.aspx

    Method 2:

    I suggest to consult the article and try to uninstall the program:

    Diagnose and solve the program installation and uninstallation problems automatically

    http://support.Microsoft.com/mats/Program_Install_and_Uninstall

    Let us know if it helps.

  • a problem with the alignment of site on the Tablet and phone version.

    I have a problem with the alignment of my site on the Tablet and phone Version of my site.

    If you open the Tariffuehrer.com site on the tablet or smartphone, you can see, the page is aligned to the left in the browser. I want the page to Center. I did find an option for it in the backend of muse.

    I'd be happy if someone can help me.

    Hi Michael,

    I can't view your site as it showed error 403,

    Can you please recheck the url of your site and repost it so that I can check on this subject.

    Kind regards

    _Ankush

  • I have a problem with my indenting, there all of a sudden everything including the headers and about 2.5 inches in withdrawal. I have

    I have a problem with my indenting, there all of a sudden everything including the headers and about 2.5 inches in withdrawal.

    Looks like your BMP format is defined to respect the heads side.  Open the designer of TFP and try to put it like that...

    I have no idea why the script would have changed your BMP formats.  Depends entirely how the script was executed - the authore makes the script actually do.

    I suspect that you can import formats of a document where you have NOT run the script, and it would return to the formatting to the way you want.  I hope you save your work!

Maybe you are looking for

  • Icons are not displayed properly in Gmail when the zoom level is between 150 and 200%

    Icons in Gmail will not correctly displayed in Firefox at all zoom levels. The problem does not occur in less than 150% zoom levels or levels of zoom to 200% or more. Levels of zoom between (150%) correct icons are not displayed until the mouse passe

  • login problem admin

    Hello I hope that there is someone who can help me. When I connect the iMac (el capitan 10.11.3), bought in February. 2016, with the admin account, there no problem. When I go to the user & preferences of groups to make some changes to the same admin

  • HP Officejet 5740 e-all-in-one: HP Deskjet 5740 fax on home WiFi network

    I am currently sending faxes using a telephone line (Verizon FIOS). HP has an option or that they are planning to put in place an option to send a FAX using my WiFi line. I know that this is not implemented by any other manufacture of PC printers and

  • Driver for the Atheros QCWB335 Qualcomm model

    Hello I just bought a 15-D002TX HP laptop and I installed windows 8.1 (64-bit) on this subject. My WiFi adapter is qualcomm atheros QCWB335. I need the link to download the driver for wireless lan and bluetooth.

  • Error code 646 in updates windows.

    I get this error in windows updates. What it means?