Full Disclosure: Re: RE: Getting a clue at Cisco

[Andrew Simmons <asimmons () messagelabs com>]

Sam Evans wrote:

> Just curious -- if the April patch fixed the vulnerability discussed, then 
> that would mean (according to Cisco) that the vulnerability affected IPV6 
> and not IPV4, correct?
>  

As has been pointed out elsewhere - IPv6 is enabled by default on many 
(all?) Cisco devices. The target machine has to be on the same network 
segment as the attacker, too, which restricts attacking hosts to, uh,.. 
other routers...

\a

--
Andrew Simmons
Technical Security Consultant
MessageLabs

Mobile: +44 (7917) 178745
asimmons () messagelabs com
 www.messagelabs.com

MessageLabs - Be certain

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/