|
|
archives If you want an RSS feed try this
Friday, July 18, 2003CISCO IOS Vulnerability ready.. steady.. GO PATCH!
Cisco Security Advisory: Cisco IOS Interface Blocked by IPv4 Packet
Document ID: 44020Revision 1.5 Last Updated 2003 July 18 at 14:00 UTC (GMT) For Public Release 2003 July 17 at 6:10 UTC (GMT) Exploitation and Public Announcements Since the initial posting of this document, the Cisco PSIRT has been made aware of public announcements of the vulnerabilities described in this advisory. Cisco PSIRT is aware that the exploit for this vulnerability has been published on a public mailing list. posted by Robert Campbell 5:47 PM Thursday, July 17, 2003CISCO IOS Vulnerability
Cisco have issued an advisory earlier today which affects all routers running IOS and IPV4....i.e. just about everyone. The threat is that an especially crafted packet could cause the IOS to believe the interface queue to be full and thus cause the system to stop processing any further packets on that interface. Crucially the failure does not cause any alarms to be raised nor will the router re-boot itself to correct the problem, manual intervention will be required. Cisco don't believe that this exploit has been used or has affected anyone. The effect of this exploit being used would be very uncomfortable for those affected, especially if it could be delivered into the core where it's effect could be catastrophic.Cisco has issued a fix and the full advisory can be read on their website. Related Links Cisco Advisory Document ID: 44020 BBC On-Line story John Leyden's story on The Register posted by Robert Campbell 11:15 AM Wednesday, July 16, 2003Netscape - P45
Andrew Orlowski the Register's resident bigot from San Francisco writes about the demise of Netscape, and the 'other browser' in today's edition of the Register. Increasingly Orlowski uses his column to vent prejudice and the final phrases of today's article '....Microsoft's miserable excuse for a web browser - a sorry piece of code ....' illustrates this perfectly. It is no accident of CD-ROM production, or the fact that it's distributed with every copy of Windows, that IE outstrips the usage of every other browser known to man or geek by by at least an order of magnitude, it's just IT WORKS, and the others at various times DID NOT.The story really should have stayed in the realms of business and what AOL-TW failure to support the development of the browser in either it's open source form properly or in it's commercial version at all....why? Related links Andrew's article in the Register Get Netscape 7 before it goes Sample Stats from ecommnet's web site posted by Robert Campbell 6:35 PM |