Anyone,
Our IA scanning people (using eEye's Retina) are telling me come recent
IOSs we're running (12.2(33)SXI3 and 15.0(1)M2) are vulnerable to the BGP
regular expression issue from almost 3 years ago. This one:
http://www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html
Looking at the bug ID CSCsk33054, it's a bit confusing what has fixes for it.
12.4(15)T2 is listed in the '1st found in' section, and also in the 'Fixed in'
section. But under 'known affected versions' link, 15.0(1)M1 is listed, which
came out well after 12.4(15)T2. For the 6500s, it does appear to be fixed in
SXF13 and more recent SXH versions. SXI appears to never have had it. But the
12.4T and 15.0 thing has me a bit confused. Can anyone shed some light on that
for me?
Thanks,
Chuck
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
