[104794] in North American Network Operators' Group
RE: IOS Rookit: the sky isn't falling (yet)
daemon@ATHENA.MIT.EDU (michael.dillon@bt.com)
Tue May 27 14:48:01 2008
Date: Tue, 27 May 2008 19:49:21 +0100
In-Reply-To: <443de7ad0805271024o199dc443u6f907eda871433f8@mail.gmail.com>
From: <michael.dillon@bt.com>
To: <nanog@merit.edu>
Errors-To: nanog-bounces@nanog.org
> Like MD5 File Validation? - "MD5 values are now made=20
> available on Cisco.com for all Cisco IOS software images for=20
> comparison against local system image values."
I would expect a real exploit to try to match Cisco's
MD5 hashes. By all means, check those hashes after you download
them but I would suggest calculating a hash using an alternate
algorithm for later checking.
--Michael Dillon
