This vulnerability is fixed in Cisco ONS software release 3.2.1 and
Cisco ONS software release 3.2.1 is the maintenance release fix version
for this vulnerability. Cisco ONS software version 3.3.0 is currently available
as an interim fix release for this vulnerability until Cisco ONS software
version 3.2.1 is released at the end of July 2002.
The procedure to upgrade to the fixed software version on the Cisco ONS
15454 is detailed at:
When considering software upgrades, also consult
and any subsequent advisories to determine exposure and a complete upgrade
In all cases, customers should exercise caution to be
certain the devices to be upgraded contain sufficient memory and that current
hardware and software configurations will continue to be supported properly by
the new release. If the information is not clear, contact the Cisco Technical
Assistance Center (TAC) or your contracted maintenance provider for assistance.