[IP] Cisco Router Alert

[Dave Farber <dave@farber.net>]

------ Forwarded Message
From: "the terminal of Geoff Goodfellow" <geoff@beat.net>
Date: Thu, 17 Jul 2003 16:40:33 +0200
To: "Dave E-mail Pamphleteer Farber" <farber@cis.upenn.edu>
Subject: Cisco Router Alert

Dave, for IP if you wish, this bug seems to be causing net meltdowns all
over the place:

Cisco routers and switches running Cisco IOS® software and configured to
process Internet Protocol version 4 (IPv4) packets are vulnerable to a
Denial of Service (DoS) attack. A rare sequence of crafted IPv4 packets sent
directly to the device may cause the input interface to stop processing
traffic once the input queue is full. No authentication is required to
process the inbound packet.  Processing of IPv4 packets is enabled by
default. Devices running only IP version 6 (IPv6) are not affected. A
workaround is available.

Cisco has made software available, free of charge, to correct the problem.

http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml

http://www.cisco.com/en/US/products/hw/routers/ps341/products_security_advis
ory09186a00801a34c2.shtml

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
geoff.goodfellow@iconia.com * Prague - CZ * telephone +420 603 706 558
"success is getting what you want & happiness is wanting what you get"
http://www.nytimes.com/library/tech/99/01/biztech/articles/17drop.html
http://www.livejournal.com/users/a2gsg/



------ End of Forwarded Message

-------------------------------------
To manage your subscription, go to
  http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/