[nsp] Re: New Cisco Vulnerability

[Wilson, Dan]

This DOS bug affects ONLY CatOS, NOT IOS, 
AND
NOT the latest versions of CatOS.

Now'd be a great time to upgrade, or run IOS, if you can.




-----Original Message-----
From: rpcbind at speakeasy.net [mailto:rpcbind at speakeasy.net] 
Sent: Wednesday, July 16, 2003 3:14 PM
To: Gregory Hicks; Vincent J. Bono
Cc: cisco-nsp at puck.nether.net
Subject: [nsp] Re: New Cisco Vulnerability

[..moved to cisco-nsp from nanog..]

On Wed, 16 Jul 2003, Vincent J. Bono wrote:

> There seem to be rumors going around that there is a new major Cisco
> vulnerability but only the major backbones are being given fixes right
> now.

On Wed, 16 Jul 2003, Gregory Hicks wrote:

> Not 100% true...  Anyone with a Catalyst 4000/5000/6000 can get it -
> free.  See this URL for details.
> 
> http://www.cisco.com/warp/public/707/cisco-sa-20030709-swtcp.shtml

Not sure if this is it, as the advisory was made public a week ago and fixed

releases are all about 6 months old. Since the indication would be that 
providers are moving very quickly on short notice, there's something new 
afoot..

On a somewhat related note, that advisory referenced that 7.1 was available 
for the 5000 -- is this a misprint, or is it just available somewhere other 
than software center?







_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/