North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Cisco IOS Vulnerability

  • From: Daniel Karrenberg
  • Date: Fri Jul 18 03:06:57 2003 
On 17.07 15:59, Andy Dills wrote:
> Sendmail is open source, IOS is not.
> 
> Knowing where the problem is and knowing how to exploit it are two
> entirely different situations.

You are naive: Security through obscurity has never worked.
You need secrecy if you go down this road; and that is hard to do.

We are extremely lucky that Cisco managed to keep this under wraps for more 
than two months. 

The luck will not stretch to noone having the source code to a version of
IOS with the probelm or the imagination necessary to find it without source. 

Daniel