Slashdot Mirror
Major Flaw Found In Cisco IOS Devices
Joff_NZ writes "CERT has released an advisory regarding a serious flaw in all Cisco routers and switches which run IOS and process IPv4 packets (i.e. pretty much everything), which causes the device to stop processing inbound packets, and so: 'The device must be rebooted to clear the input queue on the interface, and will not reload without user intervention.' There are apparently no known exploits (yet), and Cisco have this advisory with a workaround and available fixes."
It's days like this I'm REALLY glad that I'm a unemployyed network engineer! This looks like a very serious headache!
-- I have a private email server in my basement.
This is why I always suggest alternatives to Cisco such as IP over Avian and actual implementaion on Linux
Rus
Cheap UK and US VPS
Between this announcement and the microsoft one I know at least one of the fine readers out there has cancelled all of their appointments for the next three days and has a case of mountain dew and a copy of worms for dummies under their arm whistling happily.
I'm going to say an exploit by tommorow. End of the internet by Sat. All back to normal on Monday
Rus
Cheap UK and US VPS
I call a book that can whistle pretty damn smart - knock off the 'dummies' stuff, mmkay?
Yeah you would think more people would be using Juniper routers; however, I think they creepy-looking lady on their homepage is a deterrent.
While the army took time to celebrate the discover and safe return of Major Flaw it still maintained the need to continue the search for other missing top ranking officials. We spoke with a member of the search and recovery team soon after Major Flaw was discovered.
"It is great to have found Major Flaw but we are still very worried about the others. Our job here is not finished." said Private Data.
Colonel Panic has been spotted from time to time but the army has not yet been able to pinpoint his exact position. But the most gravest of fears are held for General Protection-Fault. Sightings of the General have been few and far between in the last few years. Some conspiracy theorists say that he is not actually missing but has disguised himself. Private Data would not confirm wether they are searching for a man of similar build to General Protection-Fault but dressed all in blue.
"She's a West Texas girl, just like me" - G.W Bush Iraqis
This is actually good news for Cisco, because security holes like this appear to be a prerequisite for getting a large Department of Homeland Security contract.
"Like millions of sysadmins cried out in terror -- then were silenced."
This thing right here
Is lettin all the geeks know
What CERT talks about
You know
The major flaws in hardware
Hahaha
Check it out
Ooh dat packet so scandalous
And ya know this router couldn't handle it
See ya shakin that fist cause you paid for it
With a look in ya eye so BOFHish
Uh
Ya liked it a lot till the processing stops
And ya job was secure till da connection dropped
No time to sleep you'll reboot a lot
Cuz the router's completely loca
The core dumps like a truck truck truck
Admins like what the f^@%t
Press the power butt butt butt
Uh
I think I need to reboot it again
The core dumps like a truck truck truck
Admins like what the f^@%t
All night long
Let me see that flaw
Where the hell did you find that? On my new big LCD monitor it looks like this lady is in the room right beside me. I'm not going to be able to sleep.
Why not just filter out all the packets with the evil bit set? This should fix the problem.
This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
Wow, It's times like this I'm happy I'm not a sysadmin for a DSL service provider with heaps of customers with 827s around. ... oh wait.
Boss. I'm at the pub.
Boss: Look what one of our engineers said to a reporter !
Dogbert: (reading) "Our technology is putrid, but we compensate by ignoring complaints."
Boss: You know what would be more fun than fixing those problems ?
Dogbert: WITCH-HUNT !!!
I'm scared.
And I thought the ebay lady was a little weird... the juniper one looks like she knows where I live, and she's gonna come round and hack me to death when I least expect it.
Isn't that the gym teacher from Porky's?
what the hell do you call CiscoWorks???
Today "CiscoWorks" would probably be a contradiction in terms.
Scitne aliquis remedium potimum crapulae?
------- Sent to ValueWeb customers -------
ValueWeb has been informed by a number
of our bandwidth providers (MCI, Sprint, and
Level 3) that they will be undergoing maintenance
that may cause widespread Internet slowness
between 3:00 and 6:00 am EST, July 17th, 2003
Just another example of using sex to sell products.