full-disclosure - RE: Getting a clue at Cisco

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Mon Aug  1 20:48:43 2005
From: bytejump at gmail.com (byte_jump)
Subject: RE: Getting a clue at Cisco

In my opinion, probably the grossest error made by Cisco in all of
this was silently patching their IOS back in April. Anyone who's ever
used Cisco's software knows that you can never run the latest release,
unless you want things to break, and break badly. As a result, how
many organizations were at the latest, patched IOS release as of
BlackHat? Not many, I'd wager. If, however, Cisco had come clean and
told everyone that there is a serious problem in their IOS and
exploitation is being actively researched by Chinese hacker groups,
you'd see a lot more uptake of that April IOS release. Instead, Cisco
hangs their customers out to dry.

Shameful, just shameful.