Re: Cisco IOS Shellcode - McAfee IPS Protection

From: Darren Reed (avalon_at_caligula.anu.edu.au)
Date: 08/05/05

  • Next message: coki_at_nosystem.com.ar: "nbSMTP v0.99 remote format string exploit" 
    To: planz2009@gmail.com
Date: Fri, 5 Aug 2005 18:21:55 +1000 (Australia/ACT)

    In some mail from planz 235, sie said:
    >
    > Hi,
    >
    > McAfee claims to have "Zero-day" protection against the recent
    > vulnerability disclosed against Cisco particularly on Shellcodes.
    > Their press release says, McAfee IntruShield's existing infrastructure
    > protection proactively covers new exploit techniques against Cisco
    > IOS, such as those demonstrated at last week's Black Hat conference.

    And can someone tell me what value this is or is the compromise of
    border routers not important ?

    I'm just puzzled at how you get McAfree's product between your Cisco
    router, that gets frame/dsl/isdn/whatever from your telco, and the
    wallpoint where the attacks are going to come in from.

    Admitedly they can protect you internally and against attacks launched
    across your LAN, but how does that help an ISPs core routers that have
    dozens of inbound lines that aren't ethernet ?

    Darren

  • Next message: coki_at_nosystem.com.ar: "nbSMTP v0.99 remote format string exploit"