Re: IOS exploit: please disclose vehicle, not mechanism

Article View: comp.dcom.sys.cisco

Article #2259

Back to comp.dcom.sys.cisco Previous Next

#2259

From: jankemi(remove)
Date: Fri, 25 Jul 2003 01:40

21 lines
2399 bytes

Bill Johnston wrote:

> 
> Well, for those of you who are not capable of
> extrapolation or abstraction, the core issue 
> here concerns the very high level of secrecy 
> that now surrounds security announcements from
> the likes of CERT, SANS, and vendors.  Sometimes
> it makes sense; often it does not.  This time 
> it did not, REGARDLESS of whether Cisco's fix 
> mitigated the problem, .......

I thought that in this case Cisco did what was reasonable. After 
dicovery of the flaw they warned me & told me to upgrade all IOS devices 
but witheld the information I'd need to write an exploit. As soon as 
exploit code was publicly available they advised me to mitigate with 
ACL's until the upgrades were complete.

What should they have done differently? Disclosed more information sooner?

--Mike

Technical Details

Message-ID: <3F2088C5.4060305@mail.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!arclight.uoregon.edu!wn13feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi.com!rwcrnsc54.POSTED!not-for-mail

References:

<Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25> <vi0eseqe4p8sc3@corp.supernews.com> <Xns93C2CB80F3AF9wdjohnstoncomcastnet@206.127.4.25>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,536b22101f44acbf
X-Google-Attributes: gidf922c,public
X-Google-Thread: 114395,536b22101f44acbf
X-Google-Attributes: gid114395,public
X-Google-Thread: 102702,536b22101f44acbf
X-Google-Attributes: gid102702,public
X-Google-ArrivalTime: 2003-07-24 18:40:10 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!arclight.uoregon.edu!wn13feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi.com!rwcrnsc54.POSTED!not-for-mail
Message-ID: <3F2088C5.4060305@mail.com>
From: "jankemi(remove)" <"jankemi(remove)"@mail.com>
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.4) Gecko/20030701
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: comp.dcom.sys.cisco,ios.general,comp.security.firewalls
Subject: Re: IOS exploit: please disclose vehicle, not mechanism
References: <Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <Xns93C294B29ED49wdjohnstoncomcastnet@206.127.4.25> <vi0eseqe4p8sc3@corp.supernews.com> <Xns93C2CB80F3AF9wdjohnstoncomcastnet@206.127.4.25>
In-Reply-To: <Xns93C2CB80F3AF9wdjohnstoncomcastnet@206.127.4.25>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 22
NNTP-Posting-Host: 24.245.5.3
X-Complaints-To: abuse@comcast.net
X-Trace: rwcrnsc54 1059097210 24.245.5.3 (Fri, 25 Jul 2003 01:40:10 GMT)
NNTP-Posting-Date: Fri, 25 Jul 2003 01:40:10 GMT
Organization: Comcast Online
Date: Fri, 25 Jul 2003 01:40:10 GMT

Reply to Parent Message