..and of course:
"Cisco Denies Router Vulnerability Claims"
[snip]
Cisco Systems is downplaying a news story that suggests new security flaws may have been discovered in some of its routers.
[snip]
http://www.varbusiness.com/components/weblogs/article.jhtml?articleId=166403151
So, until the _facts_ come out, this appears to be spin vs. spin
(a play on spy v. spy, for all you Alfred E. Newman fans)...
- ferg
...and Wired News is running this story:
"Cisco Security Hole a Whopper"
Excerpt:
[snip]
A bug discovered in an operating system that runs the majority of the world's computer networks would, if exploited, allow an attacker to bring down the nation's critical infrastructure, a computer security researcher said Wednesday against threat of a lawsuit.
Michael Lynn, a former research analyst with Internet Security Solutions, quit his job at ISS Tuesday morning before disclosing the flaw at Black Hat Briefings, a conference for computer security professionals held annually here.
[snip]
http://www.wired.com/news/privacy/0,1848,68328,00.html
- ferg
For what ot's worth, this story is running in the
popular trade press:
"Cisco nixes conference session on hacking IOS router code"
http://www.networkworld.com/news/2005/072705-cisco-ios.html
- ferg