IOS Rookit: the sky isn't falling (yet)

michael.dillon at bt.com michael.dillon at bt.com
Tue May 27 18:49:21 UTC 2008


> Like MD5 File Validation? - "MD5 values are now made 
> available on Cisco.com for all Cisco IOS software images for 
> comparison against local system image values."

I would expect a real exploit to try to match Cisco's
MD5 hashes. By all means, check those hashes after you download
them but I would suggest calculating a hash using an alternate
algorithm for later checking.

--Michael Dillon




More information about the NANOG mailing list