Cisco vulnerability on smaller catalyst switches

Fri Jul 18 23:52:51 UTC 2003

With the idea below. What is the current opinion about upgraded switches behind a firewall
on a private lan?
I suspect upgrade later or not at all.
But curious about other's opinions..

Later,
J

-----Original Message-----
From: Chris Griffin [mailto:cgriffin at ufl.edu]
Sent: Friday, July 18, 2003 5:58 PM
To: nanog at merit.edu
Subject: Cisco vulnerability on smaller catalyst switches

As part of our vulnerability tests, we have been unable to confirm that the
smaller catalyst switches running IOS but without L3 capability are
vulnerable.  They don't seem to react in a negative way to the same attacks
that lock up the other devices we have tested.  Has anyone else been able to
verify this one way or the other?

--
Chris Griffin                           cgriffin at ufl.edu
Network Engineer - CCNP                 Phone: (352) 392-2061
OIT - Network Services                  Fax:   (352) 392-9440
University of Florida                   Gainesville, FL 32611