[j-nsp] PSN-2013-08-987 - OSPF Advisory - Impact?

[Cheikh-Moussa, Ahmad]

Hi Sebastian,

it depends on the environment. On a PtP interface it is not an issue, on a broadcast network, it could be an issue.
In general, it is always recommended to turn authentication ( md5) on and protect the RE with a lo0 filter.

Regards
 Ahmad



-----Ursprüngliche Nachricht-----
Von: juniper-nsp [mailto:juniper-nsp-bounces at puck.nether.net] Im Auftrag von Sebastian Wiesinger
Gesendet: Freitag, 2. August 2013 10:26
An: Juniper NSP
Betreff: [j-nsp] PSN-2013-08-987 - OSPF Advisory - Impact?

So, it's friday and there is PSN-2013-08-987. Am I overlooking something or is that only a problem for people who speak OSPF with other parties (customers, strangers,...)? I don't see the big attack vector in comparison to speaking OSPF with others in the first place...

Regards

Sebastian

--
GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
            -- Terry Pratchett, The Fifth Elephant _______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Sitz der NK Networks & Services GmbH: Von-der-Wettern-Straße 15, 51149 Köln
Registergericht: Amtsgericht Köln, Registernummer HRB 30805
Geschäftsführer: Markus Buschmann, Frank Kammer