Feeds

Cisco details Black Hat vuln fix

Side issue

  • alert
  • submit to reddit

Remote control for virtualized desktops

Cisco last week urged users of its networking kit to upgrade their software following the discovery of a vulnerability that might be exploited to launch denial of service attacks. The networking giant warned that malicious insiders could crash vulnerable systems running its Internetwork Operating System (IOS) software using maliciously crafted IPv6 packets.

Malign packets would need to be sent from the same local network segment as targeted devices, which need to be configured to process IPv6 traffic, increasing the difficulty of mounting a successful attack. But if these barriers are overcome compromised devices may be open to further exploitation, Cisco warns in an advisory. Security notification service Secunia rates the alert as "moderately critical"

Every Cisco device running any unfixed version of Cisco IOS code and configured to process IPv6 packets is potentially at risk. However the networking giant has released free software upgrades (details here) designed to shore up security defences.

Black Hat kerfuffle

Cisco published the advisory on Friday (29 July) two days after the vulnerability was disclosed at the Black Hat security conference in Vegas on Wednesday (27 July). The Black Hat presentation - during which security researcher Michael Lynn demonstrate mechanisms to remotely compromise Cisco routers and run malign code - was swiftly followed by a controversial gagging order from Cisco and Lynn's former employer ISS that saw materials from the talk ripped from conference proceedings. Lynn has agreed to turn over all materials from the talk and to avoid using any Cisco code in his possession for further reverse engineering or security research.

The advisory Cisco issued Friday concerns a local exploit not the possibility of running remote attacks that formed the cornerstone of Lynn's presentation. Nonetheless the advisory presents further fallout from Lynn's talk, and Cisco's response to it, that have together reignited the debate about the disclosure of security vulnerabilities. ®

Related stories

Cisco, ISS file suit against rogue researcher
Settlement reached in Cisco flaw dispute
Unholy trio pose DDoS risk for Cisco kit
VoIP security group goes on the defensive
Cisco takes IPv6 closer to the mainstream

Remote control for virtualized desktops

More from The Register

next story
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.