[c-nsp] Cisco Security Advisory: TCP State Manipulation Denial ofService Vulnerabilities in Multiple Cisco Products

[Gert Doering]

Hi,

On Mon, Sep 14, 2009 at 10:47:17AM -0400, Jared Mauch wrote:
> On Sep 14, 2009, at 10:36 AM, Gert Doering wrote:
> 
> >On Mon, Sep 14, 2009 at 09:52:36AM -0400, Jared Mauch wrote:
> >>While you're at it, ask for protected memory in the software.  It's
> >>not like ram/flash are expensive these days...
> >
> >Does "modular" have that?  Or not yet?
> >
> >(I want to see modular on *all* IOS based platforms, and not as a
> >somewhat-neglected step child on one specific niche platform that
> >is actually fighting with another BU for line card support...  or if
> >that is not feasible, completely abandon IOS and provide XE or NX-OS
> >on *all* platforms)
> 
> The modular that showed up on 65xx was because 65xx saw value in it.   
> No other platform sees the same value, meaning no protected memory for  
> you.

Between your lines, I read "modular *has* protected memory", which is 
a good thing - we bought $lots of 6506's last year specifically because
we wanted to run modular on it (and did not get RSP720s + 7600s).

> It's sad when you see all the effort that went into the modular over  
> the years being thrown away/ignored then keep having devices crash  
> with more catastrophic outcomes and no usable debugging information.

Yes.  Stupid company, this one.

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090916/49b1da1d/attachment.bin>