pacnog January 2005

pacnog@pacnog.org

11 participants
8 discussions

by Joseph Burford

Hi all, just wondering if anyone from netpci.com is on list? We are seeing reasonably lengthy email delays (anywhere from 4 hours to 2 days) for inbound email from your systems to us. Regards, Joseph

17 years, 5 months

[Fwd: US-CERT Technical Cyber Security Alert TA05-026A -- Multiple Denial-of-Service Vulnerabilities in Cisco IOS]

by Franck Martin

FYI -------- Original Message -------- Subject: US-CERT Technical Cyber Security Alert TA05-026A -- Multiple Denial-of-Service Vulnerabilities in Cisco IOS Date: Wed, 26 Jan 2005 18:01:41 -0500 From: CERT Advisory <cert-advisory(a)cert.org> Organization: CERT(R) Coordination Center - +1 412-268-7090 To: cert-advisory(a)cert.org Technical Cyber Security Alert TA05-026A Multiple Denial-of-Service Vulnerabilities in Cisco IOS Original release date: January 26, 2005 Last revised: -- Source: US-CERT Systems Affected * Cisco routers and switches running IOS in various configurations Overview Several denial-of-service vulnerabilities have been discovered in Cisco's Internet Operating System (IOS). A remote attacker may be able to cause an affected device to reload the operating system. I. Description Cisco has published three advisories describing flaws in IOS that could allow a remote attacker to cause an affected device to reload. Further details are available in the following vulnerability notes: VU#583638 - Cisco IOS contains DoS vulnerability in MPLS packet processing The IOS implementation of Multi Protocol Label Switching (MPLS) contains a vulnerability that allows malformed MPLS packets to cause an affected device to reload. An unauthenticated attacker can send these malformed packets on a local network segment that is connected to a vulnerable device interface. VU#472582 - Cisco IOS IPv6 denial-of-service vulnerability A vulnerability in the way that IOS handles a sequence of specially crafted IPv6 packets could cause an affected device to reload, resulting in a denial of service. The vulnerability is exposed on both physical interfaces (i.e., hardware interfaces), and logical interfaces (i.e., software defined interfaces such as tunnels) that are configured for IPv6. VU#689326 - Cisco IOS vulnerable to DoS via malformed BGP packet An IOS device that is enabled for Border Gateway Protocol (BGP) and set up with the bgp log-neighbor-changes option is vulnerable to a denial-of-service attack via a malformed BGP packet. II. Impact Although the underlying causes of these three vulnerabilities is different, in each case a remote attacker could cause an affected device to reload the operating system. This creates a denial-of-service condition since packets are not forwarded through the affected device while it is reloading. Repeated exploitation of these vulnerabilites would result in a sustained denial-of-service condition. Since devices running IOS may transit traffic for a number of other networks, the secondary impacts of a denial of service may be severe. III. Solution Upgrade to a fixed version of IOS Cisco has updated versions of its IOS software to address these vulnerabilities. Please refer to the "Software Versions and Fixes" sections of the Cisco Security Advisories listed in Appendix A for more information on upgrading. Workaround Cisco has also published practical workarounds for VU#689326 and VU#583638. Please refer to the "Workarounds" section of each Cisco Security Advisory listed in Appendix A for more information. Sites that are unable to install an upgraded version of IOS are encouraged to implement these workarounds. Appendix A. References * Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers - <http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtml> * Cisco Security Advisory: Multiple Crafted IPv6 Packets Cause Reload - <http://www.cisco.com/warp/public/707/cisco-sa-20050126-ipv6.shtml> * Cisco Security Advisory: Cisco IOS Malformed BGP Packet Causes Reload - <http://www.cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml> * US-CERT Vulnerability Note VU#583638 - <http://www.kb.cert.org/vuls/id/583638> * US-CERT Vulnerability Note VU#472582 - <http://www.kb.cert.org/vuls/id/472582> * US-CERT Vulnerability Note VU#689326 - <http://www.kb.cert.org/vuls/id/689326> _________________________________________________________________ Feedback can be directed to the authors: Will Dormann, Chad Dougherty, and Damon Morda _________________________________________________________________ This document is available from: <http://www.us-cert.gov/cas/techalerts/TA05-026A.html> _________________________________________________________________ Copyright 2005 Carnegie Mellon University. Terms of use: <http://www.us-cert.gov/legal.html> _________________________________________________________________ Revision History January 26, 2005: Initial release Last updated January 26, 2005 -- Franck Martin ICT Specialist franck(a)sopac.org SOPAC, Fiji GPG Key fingerprint = 44A4 8AE4 392A 3B92 FDF9 D9C6 BE79 9E60 81D9 1320 "Toute connaissance est une reponse a une question" G.Bachelard

17 years, 5 months

pacific participation and contributions to ORDIG

by Save Vocea

Hi all, I just wanted to update the group about open on-line discussions now underway seeking input from the AP region on Internet governance issues. This is facilitated by APDIP and threads to the discussions are also archived for easy reference. The forum opened on January 13 and runs until February 17. I'd encourage you to subscribe in http://igov.apdip.net/opening_discussion/subscribe/formmailer if you have not done so to contribute or read others opinions from the discussions and do spread the word and encourage participation with peers and stakeholders in the community. Regards, Save -- Savenaca VOCEA | Research & Liaison Officer(Pacific) | APNIC Secretariat Email: save(a)apnic.net | PO Box 2131 Milton QLD 4064 Phone: +61 7 3858 3107 | Australia Fax: +61 7 3858 3199 | http://www.apnic.net --------------------------------------------------------------- See you at APNIC-19 Kyoto, Japan, 21 to 25 Feb 2005 and APRICOT 2005 http://www.apnic.net/meetings --------------------------------------------------------------- * ASIAN TSUNAMI & EARTHQUAKE RELIEF APPEAL Links to tsunami and earthquake disaster relief programs are available on our home page at http://www.apnic.net

17 years, 5 months

Fw: [pacnog] Intelsat Reports Loss of IS-804

by Jon Leeman

Nauru was down for 4 days. Rgds., Jon > ----- Original Message ----- > From: "Andy Linton" <asjl(a)citylink.co.nz> > To: <pacnog(a)pacnog.org> > Sent: Wednesday, January 19, 2005 9:59 AM > Subject: Re: [pacnog] Intelsat Reports Loss of IS-804 > > > > Steven G. Huter wrote: > > > has anyone in the region been affected by this ? > > > > > > > http://www.intelsat.com/aboutus/press/release_details.aspx?year=2005&art=20… > > > > The effect has been pretty widespread. I know Niue was out for four days. > > Tokelau, Vanuatu and Tonga may still be out. > > > > There's more at > > http://tvnz.co.nz/view/news_technology_story_skin/469195%3fformat=html > > _______________________________________________ > > pacnog mailing list > > pacnog(a)pacnog.org > > http://mailman.apnic.net/mailman/listinfo/pacnog >

17 years, 5 months

Intelsat Reports Loss of IS-804

by Steven G. Huter

has anyone in the region been affected by this ? http://www.intelsat.com/aboutus/press/release_details.aspx?year=2005&art=20… steve huter

17 years, 5 months

Bandwidth Manager

by Jon Leeman

Group, Does anyone use / have experience with bandwidth managers similar to "ET/BWMGR - Bandwidth Manager" at; http://www.etinc.com/index.php?page=bwmgr.htm ? The VOIP provider - Earth Station using PaSat / UUNET in the US - and the company I work for - Earth Station using IntelSat / Telstra Reach - are considering using a single Earth Station and a single provider. We need to keep the traffic seperate for the 2 blocks of /23 IP's we'll each be using. The 'nice' feature of the above is being able to utilise each others bandwidth when not in use. Regards, Jon

17 years, 5 months

VaLinux

by Richard StClair

Hello Group, I'm looking for a console adapter for a VaLinux/Network Engines P7000 server. This is the adaptor that allows you to plug in monitor keyboard and mouse to the VHD connector on the back. I've been looking on Ebay...no luck. I know somebody has one in their junkbox someplace. ;-) -- Regards, Richard St Clair, Co-Founder & Internet Evangelist, Internet Users Society Niue PICISOC Chairman, APTLD Board Member -------------------------------------------- stclair(a)niue.nu www.niue.nu Fax 683-4624 Niue Island, South Pacific 169 West 19 South -------------------------------------------- IT Policy: "Leave the geeks alone and everything will be fine".

17 years, 5 months

APRICOT 2005 registration early bird discount finishes on 12th January

by Philip Smith

(apologies for duplicates) Hi, Just a reminder that the early bird registration discount for APRICOT 2005 finishes on Wednesday 12th January. If you were planning on attending APRICOT 2005 in Kyoto, Japan, this year, please consider registering asap, and certainly before the 12th. To register, please go to: http://www.2005.apricot.net/registration.html Hope to see you all in Kyoto next month! philip --

17 years, 5 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog January 2005