[c-nsp] Cisco Security Advisory: TCP State Manipulation Denial ofService Vulnerabilities in Multiple Cisco Products

[Mark Meijerink]

Gert,

When I run the command I see al the active BGP/SSH/LDP sessions with Local Address, Foreign Address and state (ESTAB/LISTEN)

There is one entry in the table which I find a bit strange.
######## *.*                     *.*                    LISTEN

Listener on all ports???

Regards,
 Mark

Gert Doering wrote:
> Hi,
> 
> On Thu, Sep 10, 2009 at 01:48:46PM +0200, Mark Meijerink wrote:
>> When your run the show tcp brief all command you also see the listening ports.
>>
>> router#show tcp brief ?
>>   all  All end-points (even listeners)
> 
> Oh.  Cool.  For whatever reason, I overlooked this.
> 
> But anyway - my routers are lying to me.  They list *.179 just fine (BGP),
> but all the other interesting stuff (telnet, ssh, ldp) is not there...
> 
> gert
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090910/0112c2ac/attachment.bin>