Re: Cisco IOS Vulnerablity

[Jeff Kell <jeff-kell () UTC EDU>]

John Ladwig wrote:
> That was my take on it, too.  Seems like it shoulda been a press
> release, *unless* there's some nasty unannounced heap overflow in the QA
> pipeline.

My take is sort of an extension to the rootshell part of Lynn's controversial Blackhats presentation a few months back.  
This isn't a new vulnerability in and of itself, but a new and dangerous way to exploit IOS once you get there.

Jeff