[82774] in North American Network Operators' Group
RE: Cisco IOS Exploit Cover Up
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Thu Jul 28 21:04:17 2005
Date: Fri, 29 Jul 2005 01:01:42 +0000 (GMT)
From: "Christopher L. Morrow" <christopher.morrow@mci.com>
In-reply-to: <17129.29930.274223.920274@roam.psg.com>
To: Randy Bush <randy@psg.com>
Cc: "Geo." <geoincidents@nls.net>, nanog@merit.edu
Errors-To: owner-nanog@merit.edu
On Fri, 29 Jul 2005, Randy Bush wrote:
>
> > I think there is also a LOT concern about all the unpatched routers that
> > remain unpatched simply because the admins don't feel like spending a week
> > running the cisco gauntlet to get patches when you don't have a support
> > contract with cisco. Its like cisco doesn't want you to patch or they would
> > make it easy.
>
> could they be unpatched because no one has sent out a notice saying
> "versions before X have known vulnerabilities. upgrade now to one
> of the following: ...?"
or... cause new IOS won't run on them.