[c-nsp] Cisco Security Advisory: TCP State Manipulation Denial ofService Vulnerabilities in Multiple Cisco Products

Jared Mauch jared at puck.nether.net
Mon Sep 14 10:47:17 EDT 2009


On Sep 14, 2009, at 10:36 AM, Gert Doering wrote:

> Hi,
>
> On Mon, Sep 14, 2009 at 09:52:36AM -0400, Jared Mauch wrote:
>> While you're at it, ask for protected memory in the software.  It's
>> not like ram/flash are expensive these days...
>
> Does "modular" have that?  Or not yet?
>
> (I want to see modular on *all* IOS based platforms, and not as a
> somewhat-neglected step child on one specific niche platform that
> is actually fighting with another BU for line card support...  or if
> that is not feasible, completely abandon IOS and provide XE or NX-OS
> on *all* platforms)

The modular that showed up on 65xx was because 65xx saw value in it.   
No other platform sees the same value, meaning no protected memory for  
you.

It's sad when you see all the effort that went into the modular over  
the years being thrown away/ignored then keep having devices crash  
with more catastrophic outcomes and no usable debugging information.

- Jared


More information about the cisco-nsp mailing list