Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Full Version: Oh Oh Cisco...
usch
After all the trouble at the BlackHat and the discovered heap overflow in IPV6 processing, Cisco is facing even more problems.

A news-article by a German online magazine says that every customer who wants to log on to the Cisco Support-Management got the following message:
QUOTE
IMPORTANT NOTICE:

* Cisco has determined that Cisco.com password protection has been compromised.

For caution, Cisco has reset all passwords.

Original Article(in German) :http://www.heise.de/newsticker/meldung/62404

Translation (by me) :
CODE

For Ciscos image regarding Security it is getting even harder. After the network specialist's unfortunate role at the recitation about Cisco-flaws a week ago and a heap overflow in the procession of IPv6-packets being published shortly after that, customer data has apparently been compromised. Everybody who tries to log on to Cisco's webserver for support-management and orderings, gets the message:

IMPORTANT NOTICE:

* Cisco has determined that Cisco.com password protection has been compromised.

As a precaution, Cisco has reset the passwords, as an empoyee at the Cisco-Hotline confirmed on request by Heise Security. The situation is specially sensitive, because not just everyone can download patches for Cisco-products. Who for example wants to secure his router against the last Friday published flaw in the procession of IPv6 Packets, usually needs access to Cisco's Software Distribution Center.

The employee couldn't tell when the regular service would be restored and an official response to the affairs by Cisco is still outstanding. Due to the flood of requests to Cisco, the clarification of the issue will take time.




usch
Spookie
I think all the attention given to Cisco since the BH /DefCon gatherings can be best summed up by what Raven said

QUOTE
"Hiding your head in the sand is not going to help; suing researchers is not going to help - Cisco, you are really screwing up here,"

The comment can be found in this article at Security Focus

Theres several other issues with Cisco, that I have. But I won't jump on my soap box for now. Time will show the true ugly head of greed. But thats JMO

b4nqu0
QUOTE
"Hiding your head in the sand is not going to help; suing researchers is not going to help - Cisco, you are really screwing up here,"


oh yah, i was there. Everyone started applauding at that point. She did a really nice presentation. If anyone wants her notes/slides pm me.
dotslasher
lol they screwed up once again
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.