Re: Cisco Vuls

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hi Crackd,

The simplest thing you could do is run vulnerability scanners (plugins
updated) against your Cisco box and verify those vulnerabilities for
false positives. Popular ones:

Vulnerability Scanners: Nessus, Retina, QualysGuard
Verification: Metasploit Framework

Best of Luck!!

---
Nikhil Wagholikar
Practice Lead | Security Assessment & Digital Forensics
Network Intelligence (India) Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://www.niiconsulting.com/services/education/Training%20Calendar.html

2009/4/30 W W <crackd () gmail com>
> I'm looking for a way to determine whether my current cisco ios is
> vulnerable to any known exploits.  navigating cisco's site is painful
> and not very intuitive (even with a cco account).  basically if i'm
> running ios 12.2(25) on a switch do I need to upgrade and if so to
> what release?  Any thoughts?
>
> Thanks
>
> ------------------------------------------------------------------------
> This list is sponsored by: InfoSec Institute
>
> Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
> Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
> Penetration Tester exams, taught by an expert with years of real pen testing experience.
>
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------