bugtraq - RE: router worms and International Infrastructure [was: Re: IOS exploit]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 22 Sep 2005 03:02:08 -0700
From: martin@...ala.net
To: bugtraq@...urityfocus.com
Subject: RE: router worms and International Infrastructure [was: Re: IOS exploit]

> That leaves us with 30% of the Internet dead, and that's really a bad
> scenario as someone I know would say.

There's been dramatic advances in router vulnerability research
recently- one hopes that Cisco and Juiper are keeping pace. While we
are still in the theoretical stages of these attacks, I wonder how we
might recover from such a worm. When the 'network-is-unreachable'
messages reach critical mass how do we distribute patches or
information on practical mitigates? Does Cisco have contingency plans
to open up gigantic pots-based BBS's and let the frantic network admins
dial in to receive IOS updates? I hope all you infrastructure owners
have a good plan.

m/