Cisco has releases two new updates that fix security flaws in a couple of products. The first update fixes a vulnerability in Intrusion Prevention System that could allow an attacker to take full control of the IPS advice. Second, a flaw in the way CiscoWorks Management Center for IDS Sensors handles SSL certificates could be exploited by an attacker to spoof a sensor.

Cisco Intrusion Prevention System Vulnerable to Privilege Escalation: http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtml

SSL Certificate Validation Vulnerability in IDS Management Software: http://www.cisco.com/warp/public/707/cisco-sa-20050824-idsmc.shtml