[40730] in North American Network Operators' Group
Re: cisco IOS bug/exploit?
daemon@ATHENA.MIT.EDU (Jeff Gehlbach)
Mon Aug 20 10:57:34 2001
Date: Mon, 20 Aug 2001 10:56:57 -0400
From: Jeff Gehlbach <jeffg@empire.com>
To: Jim Mercer <jim@reptiles.org>
Cc: nanog@merit.edu
Message-ID: <20010820105657.B16463@empire.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20010820104203.F10630@reptiles.org>; from jim@reptiles.org on Mon, Aug 20, 2001 at 10:42:03AM -0400
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, Aug 20, 2001 at 10:42:03AM -0400, Jim Mercer wrote:
> i have a couple 2501's holding up a T1 line.
>
> static routing config, no RIP/OSPF/BGP, no httpd.
>
> router A is Version 11.0(16)
> router B is Version 11.1(5)
>
> starting saturday night, i noticed that snmp queries were failing to one
> or both of the routers at various points.
>
> i tried to log into the routers, but telnet was failing.
>
> using the console access to one of the units, i found that memory was
> exhausted.
This is an old IOS bug affecting 2500s. Not sure of the range of IOS
images with the bug present. I had to work on a massive field recall
a couple years ago (engineering-issued, not Cisco-issued) to upgrade the
flash in these things so that we could slap a 12.x IOS on them.
-jeff
--
Jeff Gehlbach, Concord Communications <jgehlbach@concord.com>
Senior Professional Services Consultant, Atlanta
ph. 770.384.0184 fax 770.384.0183