<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2462.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>CERT and Cisco have issued a warning about a
vulnerability in the Cisco IOS starting at version 11.3 and affecting all later
versions.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>If your Cisco equipment is HTTP enabled and you're
not using TACACS+ or RADIUS for authentication it is vulnerable to complete
takeover. The hack is very simple.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Please read the <A
href="http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html://">Cisco
warning</A> and/or the <A
href="http://www.cert.org/advisories/CA-2001-14.html">CERT advisory</A> for
further information.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The warnings were released yesterday.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Happy Hacker Stopping.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Larry Diffey</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>