Stories
Slash Boxes
Comments
typodupeerror delete not in

+-   Cisco Confirms Denial of Service in IOS-> on Friday September 14 2007, @08:37AM gattaca

Submitted by gattaca on Friday September 14 2007, @08:37AM
security
gattaca writes "Cisco has announced a confirmation of an unpatched denial of service in Cisco IOS.

I have just discovered a regular expression that crashes the router. I suspect the error is because of division by zero. Since I work for the Enterprise, I do not have direct access to TAC. Please somebody report this to Cisco. I have tested it on ranges of routers (2611, 2821, 2851, 7206) and IOSes (12.0-12.4). All routers crashed with some type of BUS ERROR. Command can be issued in user mode, therefore I think it can be considered as vulnerability to potentially cause DOS.
"

Link to Original Source
submission

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
Enjoy your life; be pleasant and gay, like the birds in May.