[j-nsp] The new Juniper issue/bug/exploit

Pekka Savola pekkas at netcore.fi
Sat Jan 22 09:57:48 EST 2005


On Fri, 21 Jan 2005, Richard A Steenbergen wrote:
> I personally agree that it is a smart idea to not tell folks details about
> the actual issue for a while (which significantly slows down the time for
> someone to make an exploit and start scanning the internet), but do you
> mind dropping the rest of us a hint as to what version of code fixes it
> instead of pulling this "we tip off only the largest network first, in
> secret" junk? :)

Sigh.

I hope this is a more serious issue than the TCP RST "problem" which 
was the previous cause of hush-hush upgrades...

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


More information about the juniper-nsp mailing list