RE: Working vulnerability? (Cisco exploit)

Mailman List Mirror (Read Only)
1

It's released and it works - I have verified it in a lab here.

BB

2

And others are trying it in the field now. I setup the recommended
transit ACLs yesterday. Starting at 9:25am EDT this morning, those ACLs
started getting hits. What doesn't make sense to me is according to the
advisory, the packets have to be destined for the router to crash it (not
just passed through it), but people are attacking seemingly random IPs,
including ones in a new ARIN block that have not yet been assigned/used
for anything. What do they think they're attacking?

3

Civilization.

4

just passed through it), but people are attacking seemingly random IPs,
including ones in a new ARIN block that have not yet been assigned/used
for anything. What do they think they're attacking?

Civilization.

--
D'Arcy J.M. Cain <darcy@{druid|vex}.net> | Democracy is three wolves
D'Arcy J.M. Cain | and a sheep voting on
+1 416 425 1212 (DoD#0082) (eNTP) | what's for dinner.

You call this civilisation?

:wink:

- Matt

Matthew Watkins
Network Engineer
Infinity Developments (IDNET)

Telephone: +44 (0)1462 476 555
Fax: +44 (0)1462 476 566
E-mail: matt@idnet.net.uk

5

Is there wide spread use of the protocol 55? (IP Mobility) There seems to
be alot of that around, more than I'd have expected :slight_smile:

6

>> ... but people are attacking seemingly random IPs, including ones in a
>> new ARIN block that have not yet been assigned/used for anything.
>> What do they think they're attacking?
>
> Civilization.

You call this civilisation?

Since I'm just now rereading e. e. "doc" smith's "Lensman" series, I took
the answer in that context, and I completely agree. Not so much that it's
what "we" are, that it's what "they" are fighting against.

But I moralize.

7

> >> What do they think they're attacking?
> > Civilization.
> You call this civilisation?

Since I'm just now rereading e. e. "doc" smith's "Lensman" series, I took
the answer in that context, and I completely agree. Not so much that it's
what "we" are, that it's what "they" are fighting against.

Yes, that was exactly my point.

But I moralize.

You say that like it's a bad thing.