Re: Cisco 678 exploit

[Damir Rajnovic <gaus () CISCO COM>]

Hello Joe,

At 09:56 12/10/2000 -0700, Joe wrote:
> And next time you want to complain about "vendor notification", go take a
> look at the Cisco 675 vulnerability I sent you in JANUARY that you guys still
> haven't fixed. Subject was 'Cisco 675 CISCO_WEB DoS Attack', sent to
> security-alert () cisco com on January 10th, 2000.

I do not have anything to say in our defence. Guilty as charged. I just
checked my archive and that is true. You sent that mail and we failed.
For your information, one other customer reported the same thing latter
on and I picked up that case. I also went a bit further and looked into
the CBOS in more details and that took some time too.

For what is worth I do apologize for that. We are usually better
in response than that.

Cheers,

(humble) Gaus
==============
Damir Rajnovic <psirt () cisco com>, PSIRT Incident Manager, Cisco Systems
<http://www.cisco.com/warp/public/707/sec_incident_response.shtml>
Phone: +44 7715 546 033
4 The Square, Stockley Park, Uxbridge, MIDDLESEX UB11 1BN, GB
==============
There is no insolvable problems. Question remains: can you
accept the solution?