Cisco protects routers against 'Black Hat' bug
PrintDouble plus bad
Posted in Data Networking, 3rd November 2005 14:43 GMT
Free whitepaper – Comparison of Static and Rotary UPS
Cisco has warned users of a flaw in its IOS (Internetwork Operating System) software which might be used by hackers to bypass security restrictions and run hostile code on network devices. The vulnerability reportedly affects all Cisco products that run Cisco IOS software, including routers and a limited range of switches that don't run CatOS. The networking giant has released fixes for the 12.x releases of its software as explained in a patching matrix here.
The security flap stems from a heap-based buffer overflow security bug involving internal operating system timers. This might be exploited in conjunction with some other heap-based buffer overflow vulnerability to run hostile code on vulnerable systems.
In a statement, Cisco said it had not received any reports about active exploitation of the vulnerability. It explained that the security flaw was related to security bugs outlined in a presentation by security researcher Michael Lynn at Black Hat in July. This presentation became a cause celebre in the security research community after Cisco controversially obtained a restraining order to suppress publication of Lynn's findings.
"This advisory documents changes to Cisco IOS as a result of continued research related to the demonstration of the exploit for another vulnerability which occurred in July 2005 at the Black Hat USA Conference. Cisco addressed the IPv6 attack vector used in that demonstration in a separate advisory published on 29 July 2005," it said. ®
Free whitepaper – Fundamental Principles of Generators for Information Technology
Enabling the Agile Data Center
Straight Talk with Dell: Sending out an SaaS
New storage architectures make SSDs more cost-effective
Dell PowerEdge R710 solution vs. Dell PowerEdge 2850 solution
Analyst Keynote: The Register Agile Data Center Summit
Vint Cerf mods Android for interplanetary interwebs
Adaptec CEO on the ropes after dreadful results
Boffins working on biodegradable flexi LED implants
Nvidia taps Transmeta team for x86 chip, claims analyst