Update: ISS researcher agrees to silence on Cisco flaws
Cisco plans to issue a security advisory 'within the next day'
July 28, 2005 12:00 PM ETIDG News Service -
A security researcher who gave a presentation on vulnerabilities in Cisco Systems Inc. routers at this week's Black Hat USA conference has agreed not to further discuss the issue under the terms of a permanent injunction issued by a U.S. court.
Cisco plans to issue a security advisory "within the next day," according to a statement the company released after the injunction was issued.
Cisco and Internet Security Systems Inc. (ISS) sought the injunction against Michael Lynn, who gave the Wednesday morning presentation, and Black Hat Inc., which organized the Las Vegas computer security conference. It was granted Thursday by Judge Jeffrey White of the U.S. District Court for the Northern District of California in San Francisco.
All parties involved in the case have agreed to the injunction, effectively putting an end to a dispute that dominated the final two days of Black Hat and diminished the reputation of Cisco and ISS in the eyes of many attendees.
ISS had originally replaced the presentation, titled "The Holy Grail: Cisco IOS Shellcode and Remote Execution," with a different one and had ensured that the presentation materials were torn out of a book that was part of the materials given out at the Black Hat show.
But Lynn, a research analyst at ISS, quit his job at ISS and gave the presentation anyway. Cisco and ISS had agreed that more research was needed, said Cisco spokesman John Noh, adding that the presentation did not reveal any new vulnerabilities or flaws.
Cisco took a dim view of Lynn's presentation, however. "The information that Mr. Lynn disclosed at the conference, we believe was illegally obtained and included Cisco intellectual property," Noh said.
Lynn described a now-patched flaw in the Internetwork Operating System (IOS) software used to power Cisco's routers and demonstrated a buffer-overflow attack in which he took control of a router. Although Cisco had been informed of the flaw by ISS and had patched its firmware in April, users running older versions of the company's software are at risk, he said.
Among other things, the injunction blocks Lynn from disclosing or disseminating any part of the presentation, disseminating any video recording of the presentation or disassembling or reverse-engineering Cisco code in the future.
Cisco said it sought the injunction "to stop continued irresponsible public disclosure of illegally obtained proprietary information."
At a news conference Thursday afternoon, Lynn admitted that he had converted some of Cisco's binary code into a human-readable form, a process called reverse engineering. But he disputed the idea that this
Reprinted with permission from
Story copyright 2009 International Data Group. All rights reserved.
Additional Resources


White Papers & Webcasts
Centralized Data Backup and Your WAN
Is your organization prepared to tackle the massive challenge of protecting your data in a cost effective and timely manner? With a growing...
Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...
An All-in-One Approach to Web Security
Granting web access to employees poses challenges to IT administrators and introduces unique security risks. Even as companies have perfected their security techniques...
Best Practices for Managing Business Risks from the Use of IT
(Source: Symantec) Based on exhaustive benchmarks conducted by the IT Policy Compliance, this session highlights the relationship between business risks and use of...
The Hidden Dangers of Spam
Beyond the well-understood productivity drain that spam inflicts on businesses, threats posed by illicit email circulating through a network are causing many security...
Managing And Protecting Your Ever Increasing Mobile Assets
(Source: Absolute Software) Your users are becoming more mobile each day. This is great for productivity - yet challenging for IT control. Natalie...
Open Source Security Myths Dispelled
(Source: Astaro) Open Source Software is computer software whose source code is available to the general public. This openly viewable nature...
Sun OpenSSO Enterprise Webinar
(Source: Sun) This webinar replay discusses Sun OpenSSO Enterprise innovation--the single, open-source solution that helps your business solve the challenges around internal access...
Best Practices for Backing Up VMware® with Veritas NetBackup™
VMware® is used by enterprises large and small to increase the efficiency and cost-effectiveness of their IT operations. With this in mind, Symantec...
Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...
Subscribe to Computerworld
