full-disclosure - taking their revenge @ cisco

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Thu Aug  4 19:06:28 2005
From: frank at knobbe.us (Frank Knobbe)
Subject: taking their revenge @ cisco

On Wed, 2005-08-03 at 11:19 -0400, Michael Holstein wrote:
>      * This incident does not appear to be due to a weakness in Cisco 
> products or technologies.
> 
> (gotta love that last bullet)

And that's probably correct. I doubt they got the password due to a
router flaw. Doesn't Cisco use Oracle as their backend DB for their
websites? That would certainly explain the weak DB security....

Ooooh.... Cisco suing Oracle. Now that'd be fun to watch.

Cheers,
Frank


-- 
Ciscogate: Shame on Cisco. Double-Shame on ISS.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050804/fc9ad5b6/attachment.bin