Working vulnerability? (Cisco exploit)

Fri Jul 18 13:33:55 UTC 2003

<quote who="Ken Yeo">
>
> Is this true:
>
> http://www.eweek.com/article2/0,3959,1196496,00.asp
>
> **there is a working exploit for this vulnerability but that it has not
> been
> released yet.**

No, it is not true.  The exploit *has* been released:

http://www.netsys.com/cgi-bin/displaynews?a=611

http://lists.netsys.com/pipermail/full-disclosure/2003-July/011421.html
http://lists.netsys.com/pipermail/full-disclosure/2003-July/011420.html

-davidu

----------------------------------------------------
   David A. Ulevitch -- http://david.ulevitch.com
  http://everydns.net -+- http://communitycolo.net
Campus Box 6957 + Washington University in St. Louis
----------------------------------------------------