The first observation about Cisco IOS vulnerabilities is, that there is only a small number of them published. Cisco Systems' Product Security Advisory listing2 mentions 14 vulnerabilities for Cisco IOS in 2008. Almost all of the advisories suggest that exploitation of the described issues will at maximum impact cause a denial of service condition. At closer inspection, it appears reasonable to accept that most of the published vulnerabilities are not a form of memory corruption vulnerabilities but rather malfunctions caused by insufficient handling of exceptional states in processing of certain types of network traffic
0 comments:
Post a Comment