On Wed, Sep 17, 2003 at 11:51:09AM -0700, Andrew Lee wrote:
> Is Foundry gear vulnerable to the remote exploit
> (http://www.cert.org/advisories/CA-2003-24.html) in the OpenSSH engine?
>
> Apparently some Cisco gear is:
> http://www.cisco.com/warp/public/707/cisco-sa-20030917-openssh.shtml
> because they used the OpenSSH engine in CatOS (PIX and IOS are not). I
> hear rumblings that Juniper is as well.
Juniper uses OpenSSH, but I believe that most people who use
these devices are bright enough to lock down the control plane
from unauthorized ip addresses.
Worst case scenario for people out there, restrict access to your
devices from your entire customer-netblocks... this will mean that if
you can't lock down to a specific set of ips, you at least know
it came from your network.. this is what I did in a previous life
before we locked down to a specific set of ips.. this allowed people
to fix things when they were at home and oncall...
it's a good practice for all your devices.. lock down traffic
to them all, be it foundry, cisco, juniper, or even some dumb
home nat box/router.
- jared
>
> There doesn't seem to be anything on the web site, their latest press
> release was 9/8.
>
> It would be nice to know for sure one way or the other.
>
>
> _______________________________________________
> foundry-nsp mailing list
> [email protected]
> http://puck.nether.net/mailman/listinfo/foundry-nsp
--
Jared Mauch | pgp key available via finger from [EMAIL PROTECTED]
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
From [EMAIL PROTECTED] Mon Sep 15 12:27:10 2003
From: [EMAIL PROTECTED] (Cliff Albert)
Date: Fri Sep 26 10:51:57 2003
Subject: [f-nsp] Packet Corruption on Jetcore?
In-Reply-To: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
On Mon, Sep 15, 2003 at 10:16:58AM -0600, Jeremy Noetzelman wrote:
> We've been seeing some packet corruption on various jetcore modules.
> The symptoms are rather simple, and consistent. Sniffer traces show
> that the packet payload gets corrupted, and thus the checksum doesn't
> match anymore.
>
> We've seen this on 48Ts primarily, and Gig Copper blades as well.
> Anyone else seen anything like this?
I haven't seen this behaviour on our M4 Management blade with 8 minigbic
ports.
--
Cliff Albert | RIPE: CA3348-RIPE | https://oisec.net/
[EMAIL PROTECTED] | 6BONE: CA2-6BONE |
PGP Fingerprint = 9ED4 1372 5053 937E F59D B35F 06A1 CC43 9A9B 1C5A
From [EMAIL PROTECTED] Wed Sep 17 07:36:48 2003
From: [EMAIL PROTECTED] (Borovits Roman)
Date: Fri Sep 26 10:51:58 2003
Subject: [f-nsp] Looking for Serveriron Consultant ( via email )
Message-ID: <[EMAIL PROTECTED]>
Hi,
we have configured lots of ServerIons for Server Load
Balancing, as we deal with these boxes you can buy
consulting from us.
If you are interested don't hesitate contacting me.
Roman
Mit freundlichen Gr?ssen / Best regards
???????????????????????????????????????????????????
Roman Borovits, Technik
Schoeller Network Design GmbH
Beichlgasse 8, A-1101 Wien / Vienna - ?sterreich / Austria
Tel.: +43 / (0)1 / 680 86 - 321 Mobile: +43 / (0) 664 / 380
70 28
Fax: +43 / (0)1 / 680 86 - 225; mailto:[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>
Download neuer schoeller academy Seminar Katalog:
< www.schoeller.at/katalog <http://www.schoeller.at/katalog>
>
???????????????????????????????????????????????????
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://puck.nether.net/pipermail/foundry-nsp/attachments/20030917/c9789afe/attachment.htm
From [EMAIL PROTECTED] Fri Sep 26 12:45:43 2003
From: [EMAIL PROTECTED] (Burgos, Jose)
Date: Fri Sep 26 12:45:45 2003
Subject: [f-nsp] RE: foundry-nsp Digest, Vol 8, Issue 4
Message-ID: <[EMAIL PROTECTED]>
Anyone on this list have a Business Development contact at Foundry?
Thank you in advance.
[EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, September 26, 2003 12:01 PM
To: [email protected]
Subject: foundry-nsp Digest, Vol 8, Issue 4
Send foundry-nsp mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
http://puck.nether.net/mailman/listinfo/foundry-nsp
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of foundry-nsp digest..."
Today's Topics:
1. Re: Packet Corruption on Jetcore? (Cliff Albert)
2. Looking for Serveriron Consultant ( via email ) (Borovits Roman)
----------------------------------------------------------------------
Message: 1
Date: Mon, 15 Sep 2003 18:27:10 +0200
From: Cliff Albert <[EMAIL PROTECTED]>
Subject: Re: [f-nsp] Packet Corruption on Jetcore?
To: Jeremy Noetzelman <[EMAIL PROTECTED]>
Cc: [email protected]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=us-ascii
On Mon, Sep 15, 2003 at 10:16:58AM -0600, Jeremy Noetzelman wrote:
> We've been seeing some packet corruption on various jetcore modules.
> The symptoms are rather simple, and consistent. Sniffer traces show
> that the packet payload gets corrupted, and thus the checksum doesn't
> match anymore.
>
> We've seen this on 48Ts primarily, and Gig Copper blades as well.
> Anyone else seen anything like this?
I haven't seen this behaviour on our M4 Management blade with 8 minigbic
ports.
--
Cliff Albert | RIPE: CA3348-RIPE | https://oisec.net/
[EMAIL PROTECTED] | 6BONE: CA2-6BONE |
PGP Fingerprint = 9ED4 1372 5053 937E F59D B35F 06A1 CC43 9A9B 1C5A
------------------------------
Message: 2
Date: Wed, 17 Sep 2003 13:36:48 +0200
From: Borovits Roman <[EMAIL PROTECTED]>
Subject: [f-nsp] Looking for Serveriron Consultant ( via email )
To: "'[email protected]'" <[email protected]>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
we have configured lots of ServerIons for Server Load
Balancing, as we deal with these boxes you can buy
consulting from us.
If you are interested don't hesitate contacting me.
Roman
Mit freundlichen Gr?ssen / Best regards
???????????????????????????????????????????????????
Roman Borovits, Technik
Schoeller Network Design GmbH
Beichlgasse 8, A-1101 Wien / Vienna - ?sterreich / Austria
Tel.: +43 / (0)1 / 680 86 - 321 Mobile: +43 / (0) 664 / 380
70 28
Fax: +43 / (0)1 / 680 86 - 225; mailto:[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>
Download neuer schoeller academy Seminar Katalog:
< www.schoeller.at/katalog <http://www.schoeller.at/katalog>
>
???????????????????????????????????????????????????
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://puck.nether.net/pipermail/foundry-nsp/attachments/20030917/c9789afe/attachment-0001.htm
------------------------------
_______________________________________________
foundry-nsp mailing list
[email protected]
http://puck.nether.net/mailman/listinfo/foundry-nsp
End of foundry-nsp Digest, Vol 8, Issue 4
*****************************************
