1 Cisco flaws may cripple networks - Security - News - ZDNet Australia
Breaking News: Symantec confirms hacker extortion

ZDNet / Us-cert / Story

Cisco flaws may cripple networks

By Joris Evers, CNET News.com on January 26th, 2007 
Submit

Three security holes in the software that runs Cisco Systems' routers and switches could let miscreants disrupt computer networks, including the Internet.

The vulnerabilities lie in Cisco's Internetwork Operating System and could be exploited to crash or remotely run malicious code on devices that run the software, the San Jose, Calif., networking giant warned Wednesday in security advisories. IOS runs on Cisco's routers and switches, which make up a large portion of the Internet's infrastructure.

Cisco's warning prompted the US Computer Emergency Readiness Team, or US-CERT, to issue an alert. "A remote attacker may be able to execute arbitrary code on an affected device, cause an affected device to reload the operating system, or cause other types of denial of service," US-CERT said on its Web site.

Being able to execute arbitrary code means that an attacker could change the configuration of a router or switch, redirecting traffic or potentially sniffing the data that travels through a Cisco device. In a denial-of-service attack a vulnerable router or switch would be taken offline, disrupting any traffic it is tasked to channel.

"Because devices running IOS may transmit traffic for a number of other networks, the secondary impacts of a denial of service may be severe," US-CERT said.

The impact of each of the three vulnerabilities is different. The most serious of the problems, which relates to how IOS handles specific data packets, affects a broad range of Cisco devices. This includes routers and switches used by telecommunications companies that use Cisco's gear to shuttle data traffic across networks.

"These are serious issues and patches need to be applied as soon as possible," said Gunter Ollmann, director of security strategy for IBM Internet Security Systems. "From our monitoring of underground channels there are a lot of people interested in these and actively working on exploits."

Cisco has software updates available to address the vulnerabilities, the company said in each of its alerts. "Cisco is also not aware of any current exploitation of these vulnerabilities," the company added.

Will Sturgeon of Silicon.com in London contributed to this story.

Talkback

Add your opinion

In order to post a comment, you need to be registered. (Sign In or register below)

Post your comment

Terms of Service - As a ZDNet registrant, and by using this service, you indicate that you agree to our Terms and Conditions and have read and understand our Privacy Policy.

Resource Centre Useful content from our premier sponsors

Quick Poll

What is the biggest data management challenge in your organisation?

ZDNet Australia Live

I'm ok with less for later. ESP if nrl/arl. “@zdnetaustralia: More TV Now may mean less TV later: http://t.co/Mnp2MeT7”

#Symantec confirms hacker extortion attempt where company offered $50k to prevent leak of its source code http://t.co/BbtI1CF7 || #Anonymous

RT @IDEALAW: Breastfeeding women protest outside Facebook offices worldwide: http://t.co/HqriEplR Sydney Boob Out at noon today.

More TV Now may mean less TV later: http://t.co/mEp8aWBh

PCAnywhere affected by hack: Symantec http://t.co/cLTiSk8p

Phishing scam causes Telstra email woe http://t.co/PlCX0X0N via @zdnetaustralia

I'm not sure that "nuclear option" of withdrawing from FTA is valid for the NRL or AFL. Surely the sponsors on the ground signage and pla...

21 minutes ago by mpm123 on More TV Now may mean less TV later

Australian finance site hit by DDoS: Australian finance news website Money Management yesterday fell victim to a... http://t.co/1Byavr3z

Australian finance site hit by DDoS: Australian finance news website Money Management yesterday fell victim to a... http://t.co/QboRUs2O

Australian finance site hit by DDoS http://t.co/fog7wF4q

Symantec confirms hacker extortion http://t.co/jEM9CKgC

Hipstamatic busted for plain text log-ins http://t.co/vM96j8q5

More TV Now may mean less TV later http://t.co/6XN50UdP

"NPD: Android attracting more than half of new smartphone shoppers" - ZDNet http://t.co/bakOmae8 #android

by http://t.co/vmlQ0Ecb: More TV Now may mean less TV later: Optus' landmark court win last week was hailed far a... http://t.co/KPHqI1bE

More TV Now may mean less TV later: Optus' landmark court win last week was hailed far and wide as a victory for... http://t.co/c9brAZHo

Facebook may release its core C++ library this year http://t.co/jGhSS7Ty

RT @JLLLOW: RT @zdnetaustralia: Govt caught in internet-security time warp: http://t.co/nIj6MGJE

More TV Now may mean less TV later: Optus' landmark court win last week was hailed far and wide as a victory for... http://t.co/BCsxb7l6

Hipstamatic busted for plain text log-ins http://t.co/KHxvZ4rL

Pilot sues Virgin for being an iPad Luddite http://t.co/SsF2QFO6

HILARIOUS!!I And shocking Symantec haven't been suited to hell! RT @zdnetaustralia: Symantec confirms hacker extortion: http://t.co/xR4HmTZo

Hipstamatic busted for plain text log-ins - It has been revealed that popular iPhone photography app Hipstamatic is ... http://t.co/RADwB5XE

Phishing scam causes Telstra email woe - compromised email accounts blacklisted http://t.co/qbO2bU85 (via @zdnetaustralia)

iPhone camera app Hipstamatic stores login details in plain text http://t.co/u3wnFq1P

Hipstamatic busted for plain text log-ins http://t.co/MFSmwS7L

Pilot sues Virgin for being iPad Luddite http://t.co/xSKIFeOh

How to spot a fake Facebook profile (infographic) http://t.co/8HZFuefI

Symantec confirms hacker extortion: http://t.co/Ohetnr31

RT @zdnetaustralia: Symantec confirms hacker extortion: http://t.co/Ohetnr31

by http://t.co/vmlQ0Ecb: Symantec confirms hacker extortion: Symantec has today confirmed that email corresponden... http://t.co/3K2sq0hI

#Google: Madonna tops Tom Brady, Patriots and Giants in searches http://t.co/ZPPBqhOj

Not just GenY RT @kevster009: 10 things Gen Y do online.. and shouldn't. http://t.co/D92mClSK…. A great reminder for everyone.

Symantec confirms hacker extortion - ZDNet Australia http://t.co/CKaHh8XM

Symantec confirms hacker extortion: Symantec has today confirmed that email correspondence between the company a... http://t.co/8llws6Tl

Macquarie expands shared tech team http://t.co/MqyJU1gM

The mining industry run around telling us about wht great employment gererators they are when they are trying to avoid taxation, as soon ...

1 hour ago by Kevin Cobley on Robotic mining worth its high cost: Rio

VeriSign Authentication Services provides solutions that allow companies & consumers to engage in communications & commerce online with c...

1 hour ago by santla on Hackers stole data from VeriSign in 2010

I've delt with developers daily for 2 decades and I am astounded at the arrogance that new grads possess, combined in no fundamentals and...

1 hour ago by Dr_Truth on IT lumped with 'arrogant, ignorant' grads

Every mobile phone we should have a good mobile security downloaded so that we can be aware of this malwares!!!

1 hour ago by santla on Google scans Android apps for malware

Oh nice to know about this article!!!

1 hour ago by santla on Ex-Firefox exec plans Facebook for Android

Its good if they get it!!

1 hour ago by santla on Will Android get a root store?

Android is good!!! i too have android mobile ..

2 hours ago by santla on Android features better than iPhone: Woz

Thanks for the artilcle i too have android mobile phone!! and its so good and i have comodo mobile security in my phone

2 hours ago by santla on Android to be developer platform of choice

Great to know about it. along with this we can have some good mobile security so that we can remain safe with our mobiles tooo such a com...

2 hours ago by santla on iPhone 4S wins Android, BlackBerry users

Android mobile very cheap and good now a days more than ipad !!!

2 hours ago by santla on Android closes in on iPad market share

Android mobileare getting lot of malware now a days its better to have some good mobile securities like Comodo Mobile Security !!!

2 hours ago by santla on Google scans Android apps for malware

This has been a serious problem now a days!!!

2 hours ago by santla on Microsoft settles with alleged botnet host

"I agree that their products have gotten a lot better. How insecure they still are says a lot about how hard this problem really is

2 hours ago by santla on Has Microsoft fixed its security issues?

Yeah i accept with myron!!

2 hours ago by santla on Microsoft halts another botnet: Kelihos

the Kelihos botnet has not crawled out of the grave, ... new botnet is being assembled using a variant of the original malware.

2 hours ago by santla on Antivirus employee named in botnet case

Thanks to know about it the artile was good

2 hours ago by santla on 2011: security's most spectacular stuff-ups

Kelihos, according to the researchers, has been found in new variants and they quite resemble the earlier build.

2 hours ago by santla on Kelihos variants slipped Microsoft's noose

Facebook is facing lot of attacks now a days !!!

2 hours ago by santla on The floatcast

Android phones malwares are increasing now a days a lot. inorder to get rid from this we have to be aware to have a good mobile security...

2 hours ago by santla on Android malware finds way to polymorph

This story has been voted 5 times in the last 24 hours!

3 days ago, Abbott paving a telecoms road to nowhere

Facebook Activity

Keep up with ZDNet Australia

LinkedinLinkedin Join our network

RSS FeedsRSS Feeds Subscribe now

NewslettersNewsletters Subscribe today

AlertAlertsSubscribe now

ZDNet Events Calendar

ZDNet Events Calendar

Plan Comparison

Prev Next
Loading...
Deals powered by WhistleOut

Sponsored resources