Cisco warns of network flaw

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

NEWS
Cisco warned Internet service providers and corporations late on Wednesday that a flaw in its router software could allow attackers to freeze Cisco routers and stop the flow of network data through the devices. Some details of the vulnerability leaked out to the Internet earlier in the day, when network administrators noticed that many service providers had announced unscheduled maintenance of their networks. Cisco didn't initially comment on the issue. Late on Wednesday, the company posted details of the flaw in an advisory on its Web site. "Through internal testing, Cisco has discovered that devices running Cisco IOS software may be susceptible to a denial-of-service attack," said Jim Brady, a company spokesman. "To address this, Cisco has created an IOS software fix and workaround to minimise the risk of potential network attack." IOS is the operating system upon which most of Cisco-brand network hardware is based. The vulnerability is caused by a flaw in the way a Cisco router handles certain Internet data. An attacker could use a special sequence of packets and cause the router to believe its input queue -- storage for incoming data -- was full, according to the Cisco advisory. The attack would crash the router and the device would have to be rebooted to clear the queues. Brady said that the company wasn't aware of any online vandals taking advantage of the issue. "We are working very closely with our customers as well as industry, government, academia, and Internet security organisations to effectively address this issue." Earlier on Wednesday, Internet service providers were scrambling to schedule maintenance time for their networks. Messages posted to a network administrator's mailing list indicated that AT&T, Level 3, Cogent Communications and Sprint had all warned customers of upcoming maintenance. Sprint confirmed that the company had announced to its customers it would be performing maintenance on its network and that the work was intended to fix the Cisco vulnerability. "Sprint is aware of the issue regarding Cisco," said spokesman Charles Fleckenstein, reading from a statement. "Modifications are being performed on the Sprint Internet backbone, and customers should have no concerns regarding an interruption of service in regards to Sprint." While Fleckenstein couldn't confirm the details of the flaw, he stressed that network outages elsewhere on the Internet could affect its customers' connections and their ability to reach Web sites, suggesting that the vulnerability could be widespread. "While the appropriate measures are being taken to protect the Sprint Internet backbone, issues may arise with traffic that is handed off to other carriers, if those carriers have not taken the measures that Sprint has, to protect their networks," Fleckenstein said. Sprint expected to have its network hardware updated by Thursday morning. AT&T, Level 3 and Cogent Communications couldn't be reached for comment Wednesday.
Networks and networking products have seen huge innovation and growth in the last few years. High bandwidth LANs and Storage Area Networks are now in common use. ZDNet UK's Networking Central keeps you up to date with the latest news and views. Let the editors know what you think in the Mailroom.

Talkback

It is said that a specially crafted sequene of ipv4 packets with protocol type 53,55,77,and 103 could cause the router which receive these-like packets to stop processing any traffic through the interface that these packets reach.
Buit who can tell me how to craft the packets with such type protocols as 53.55.77.103?
you can email me the way

via Facebook 5 August, 2003 03:53
Reply

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

TerryRK

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

3 hours ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Freebies202

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

12 hours ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source
kevinmchapman

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

20 hours ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
Marg Menzies Harrison

Another grammar faux pas is the improper use of "you". When sitting down down in a restaurant, for example, I get cringe when the waitress...

22 hours ago by Marg Menzies Harrison via Facebook on 10 flagrant grammar mistakes that make you look stupid
zdnetukuser

And NOW, folks, for Canonical's next trick... Kubuntu is late. Here's a pencil. Draw your own conclusions. cf.:...

22 hours ago by zdnetukuser on Linux Minterface
Moley

@kevinmchapman. The discussion here reflects the very significant number of users who really do like the traditional menu system and who wish to...

1 day ago by Moley on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

Er, no... It is an efficient means of finding the application/file/setting you need in one place. The icons are a simply a fallback for when you...

1 day ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

Isn't the provision of a text based search an admission by the developers that the mass of icons approach does not work? I don't need to use a...

1 day ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

"Unity and GNOME 3 both abandon the old text-based cascading menus in favour of a graphical icon-driven system." Point truly missed. Both use a...

1 day ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

whs001 - Thank you, I'm glad you liked the article. I absolutely agree with you on your first point. I should perhaps have made it clearer that...

1 day ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Dennis Nilsson

If we allow corporate interest to dictate the way our government circumvents due process against foreign entities then we should accept the same...

1 day ago by Dennis Nilsson via Facebook on ACTA stumbles in Germany
GHar123

I totally dislike pirating of works, I fear that artists will be deterred from creating works if they think that they are going to get ripped off....

1 day ago by GHar123 on ACTA stumbles in Germany
JCB33

How dare film makers, artists or anybody that invests in creativity stop us pirating their works for free. I want to be able to walk into my local...

2 days ago by JCB33 on ACTA stumbles in Germany
Moley

@GrueMaster. I prefer horses for courses rather than one size fits all. I, and I suspect most other computer users, do not really wish to have...

2 days ago by Moley on A tale of two distros: Ubuntu and Linux Mint
greycynic

The product that scares me every time I have to use it is the Office 2007 version of Excel. The first bug that I found was applying the median...

2 days ago by greycynic on Ten flawed products that derail productivity
GrueMaster

Nice review and very informative. One thing I'd like to add (in reply to whs001's 1st question), the main reason to have the same interface from...

2 days ago by GrueMaster on A tale of two distros: Ubuntu and Linux Mint
Frederick Wrigley

I'be been using Mint 12 since the RC came out, and I am far more happy with the Cinnamon, the Mate, and, yes (with extensions), theGnome 3...

2 days ago by Frederick Wrigley via Facebook on A tale of two distros: Ubuntu and Linux Mint
bdantas

Excellent article. One small correction, though--although a fresh installation of Linux Mint 12 will, indeed, provide the user with a version of...

2 days ago by bdantas on A tale of two distros: Ubuntu and Linux Mint
Alan Ralph

In related news, the ISPs club together to get the members of the Home Affairs Select Committee (ya goofed on that part, ZDNet UK) copies of "The...

2 days ago by Alan Ralph via Facebook on MPs urge ISPs to take down terrorist material
Alan Ralph

In related news, the ISPs club together to get the members of the Home Affairs Select Committee (ya goofed on that part, ZDNet UK) copies of "The...

2 days ago by Alan Ralph via Facebook on MPs urge ISPs to take down terrorist material