Cisco router worm?
p2p news / p2pnet:- “Security researchers say they have found weaknesses in Cisco’s Internet Operating System (IOS) which may enable an Internet worm to spread between Cisco routers,” says Netcraft. “But Arhont Ltd. denied reports that such a worm had actually been developed.”
The Bugtraq mailing list has a post from Arhont’s Andrei Mikhailovsky which apparently reveals “weaknesses in the way IOS uses the Enhanced Interior Gateway Routing Protocol (EIGRP), which handles information exchange between routers,” says the story, going on:
” ‘Among the discovered issues are multiple vulnerabilities in EIGRP implementation,’ Mikhailovsky wrote. ‘Also, authors have addressed the _theoretical_ aspects of an algorithm for a cross-platform worm that could spread in IOS based devices.’ EIGRP supports the AppleTalk and IPX (Novell Netware) networking protocols in addition to IP, allowing cross-platform routing. Arhont offered no additional details, but said it is preparing an advisory for Cisco’s Product Security Incident Response Team (PSIRT).”
However, the worm reports were a, “complete lie,” retorts Mikhailovsky, blaming them on “inaccurate translations of a Russian-language weblog maintained by Arhont’s Andrew Vladimirov.”
Something you think we should know? tips[at]p2pnet.net
First they ignore you, then they laugh at you, then they fight you, then you win
- Mohandas Gandhi
See:-
weaknesses – Re: [Full-disclosure] Cisco IOS hacked?, September 19, 2005
Netcraft – Report: Cisco Flaw Could Allow Router Worm, September 20, 2005
