full-disclosure - Cisco Security Advisory: Cisco VPN3000Concentrator Vulnerable to Crafted HTTP Attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon Jan 30 04:58:57 2006
From: dudevanwinkle at gmail.com (Dude VanWinkle)
Subject: Cisco Security Advisory: Cisco
	VPN3000Concentrator Vulnerable to Crafted HTTP Attack

On 1/26/06, Dario Ciccarone (dciccaro) <dciccaro@...co.com> wrote:

>
>         So, in closing, you are not 'plain out of luck' - there is a
> process in place for you to be able to obtain a fixed software release,
> for free, even without a service contract.

Soooo, if we find enough flaws in IOS versions that just cant be fixed
by a patch, and must be addressed by upgrading to the current build,
then no one will need the service contract... right? =P

-JP
"Get cracking"
-JP