[scg-sec] Cisco Issue?

[Bicknell, Leo]

I haven't been able to find the talk online yet, but for those of you who
read this before Nanog (if you ever read Nanog)...

http://www.crn.com/sections/breakingnews/breakingnews.jhtml?articleId=166403
096


-----Original Message-----
From: Smith, Donald [mailto:Donald.Smith at qwest.com] 
Sent: Wednesday, July 27, 2005 2:01 PM
To: Bicknell, Leo; scg-sec at puck.nether.net
Subject: RE: [scg-sec] Cisco Issue?

Joshua Wright (a fellow sans handler) states in a comment on that
article.
Note that Mike Lynn was going to present on exploiting IOS to use
vulnerabilities in code to run arbitrary code of the attacker's
choosing. This is a huge deal, since a problem with IOS that was
formerly limited to a DoS could be leveraged to add configuration
commands to the IOS configuration, or other nasty things 



Donald.Smith at qwest.com giac 
-----Original Message-----
From: scg-sec-bounces at puck.nether.net
[mailto:scg-sec-bounces at puck.nether.net] On Behalf Of Bicknell, Leo
Sent: Wednesday, July 27, 2005 11:37 AM
To: scg-sec at puck.nether.net
Subject: [scg-sec] Cisco Issue?


http://blogs.washingtonpost.com/securityfix/2005/07/mending_a_hole_.html
 
Interesting news, and I doubt Cisco is ready to clue us in yet if it is
true. J