TCP-ACK vulnerability (was RE: SSH on the router)

• Previous message (by thread): SSH on the router - was( IT security people sleep well)
• Next message (by thread): TCP-ACK vulnerability (was RE: SSH on the router)
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, 7 Jun 2004, McBurnett, Jim wrote:
> Aside from that, Use ACL's out the wazoo on the VTY lines and limit access to
> that to say 1 SSH enabled router or 1 IPSEC enabled router...

It doesn't really matter if you use SSH, Telnet or HTTP; if you can send
evil packets to the router/switch and it falls over and dies.

http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml

IP Permit Lists will not provide any mitigation against this vulnerability.

The race is on, who will find your switches first?

• Previous message (by thread): SSH on the router - was( IT security people sleep well)
• Next message (by thread): TCP-ACK vulnerability (was RE: SSH on the router)
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]