[170333] in North American Network Operators' Group
Re: Cisco Security Advisory: Cisco IOS Software SSL VPN Denial of
daemon@ATHENA.MIT.EDU (james@jamesstewartsmith.com)
Wed Mar 26 12:52:49 2014
In-Reply-To: <web-120043@mail.ropeguru.com>
To: "Robert Webb" <rwebb@ropeguru.com>,psirt@cisco.com,nanog@nanog.org
From: james@jamesstewartsmith.com
Date: Wed, 26 Mar 2014 16:51:55 +0000
Reply-To: james@jamesstewartsmith.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org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