PoC Exploit Now Available for Cisco NHRP Vulnerability

Mailman List Mirror (Read Only)
1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you're using NHRP and haven't patched, it might be a good
idea to do so real soon now.

A proof of concept exploit is now avialable which can crash a router
configured with NHRP authentication enabled:

http://www.milw0rm.com/exploits/4272

Cisco security advisory from yesterday:

http://www.cisco.com/en/US/products/products_security_advisory09186a0080899
63b.shtml

FYI,

- - ferg

2

I guess we won't know if some of these are remote code execution until we have another Michael Lynn.

   Gadi.