OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Weld Pond (weldATSTAKE.COM)
Date: Mon Feb 05 2001 - 14:21:26 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Cisco Systems Product Security Incident Response Team <psirtCISCO.COM>
    writes:
    >Exploitation and Public Announcements

    > ------------------------------------

    >

    >The Cisco PSIRT is not aware of any public announcements or malicious use

    >of the vulnerabilities described in this advisory. These vulnerabilities

    >were discovered by a Security Consulting firm during a customer security

    >audit.

    Contrary to the above statement there is at least one other public
    announcement on this issue. stake has published an advisory with the
    details
    of our Arrowpoint research at:
    http://www.atstake.com/research/advisories/2001/index.html#013101-1

    Cisco was very responsive on this issue, even making an Arrowpoint device
    available for us to continue our testing.

    -weld