RE: Cisco IOS Denial of Service that affects most Cisco IOS routers- requires power cycle to recover

From: Tina Bird (tbird@precision-guesswork.com)
Date: Fri Jul 18 2003 - 12:14:24 PDT

  • Next message: Mitchell Rowton: "Re: Cisco IOS vulnerability"

    On Fri, 18 Jul 2003, James Fields wrote:
    
    > No detailed structure needed.  Just a sequence of packets (any of the
    > protocols will do, 103 will only work if PIM is enabled on the router)
    
    ---> if PIM is explicitly enabled on the router, none of the router's
    interfaces will be subject to the DoS via IP/103 packets.  the task
    scheduling software will clear PIM packets from the input queues and
    prevent them from creating the DoS.
    
    it's in the Cisco advisory...
    
    tbird
    
    --
    A computer lets you make more mistakes faster than any invention in human
    history - with the possible exception of handguns and tequila.
    
                                     -- Mitch Ratliff
    
    http://www.precision-guesswork.com
    Log Analysis http://www.loganalysis.org
    VPN http://vpn.shmoo.com
    tbird's Security Alerts http://securecomputing.stanford.edu/alert.html
    
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Jul 18 2003 - 13:10:53 PDT