July 28, 2005 (IDG News Service) --
A security researcher who gave a presentation on vulnerabilities in Cisco Systems Inc. routers at this week's Black Hat USA conference has agreed not to further discuss the issue under the terms of a permanent injunction issued by a U.S. court.
Cisco plans to issue a security advisory "within the next day," according to a statement the company released after the injunction was issued.
Cisco and Internet Security Systems Inc. (ISS) sought the injunction against Michael Lynn, who gave the Wednesday morning presentation, and Black Hat Inc., which organized the Las Vegas computer security conference. It was granted Thursday by Judge Jeffrey White of the U.S. District Court for the Northern District of California in San Francisco.
All parties involved in the case have agreed to the injunction, effectively putting an end to a dispute that dominated the final two days of Black Hat and diminished the reputation of Cisco and ISS in the eyes of many attendees.
ISS had originally replaced the presentation, titled "The Holy Grail: Cisco IOS Shellcode and Remote Execution," with a different one and had ensured that the presentation materials were torn out of a book that was part of the materials given out at the Black Hat show.
But Lynn, a research analyst at ISS, quit his job at ISS and gave the presentation anyway. Cisco and ISS had agreed that more research was needed, said Cisco spokesman John Noh, adding that the presentation did not reveal any new vulnerabilities or flaws.
Cisco took a dim view of Lynn's presentation, however. "The information that Mr. Lynn disclosed at the conference, we believe was illegally obtained and included Cisco intellectual property," Noh said.
Lynn described a now-patched flaw in the Internetwork Operating System (IOS) software used to power Cisco's routers and demonstrated a buffer-overflow attack in which he took control of a router. Although Cisco had been informed of the flaw by ISS and had patched its firmware in April, users running older versions of the company's software are at risk, he said.
Among other things, the injunction blocks Lynn from disclosing or disseminating any part of the presentation, disseminating any video recording of the presentation or disassembling or reverse-engineering Cisco code in the future.
Cisco said it sought the injunction "to stop continued irresponsible public disclosure of illegally obtained proprietary information."
At a news conference Thursday afternoon, Lynn admitted that he had converted some of Cisco's binary code into a human-readable form, a process called reverse engineering. But he disputed the idea that this was an illegal practice. "It's, generally speaking, not illegal to reverse-engineer for security reasons," he said.
"Welcome to a special IT Blogwatch EXTRA: as Richi Jennings watches bloggers' reactions to the Russian hackers who claim to..."
Read more...
"As if taxpayers needed another reason to scorn the IRS. I read yesterday that the inspector general review of several..."
Read more... Read more Security posts or See all Blogs
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center Register for this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Quick Sizing Guide for SAS Grid Running on HP BladeSystems and EVA Storage
Download this white paper today! (Source: HP) Designed for CIOs, IT managers, data center managers and grid computing architects seeking to improve performance, SAS Grid Computing on the HP BladeSystem c-Class helps accelerate growth and mitigate risks with a simplified, consolidated infrastructure that's agile enough to efficiently handle change. SAS Grid Manager on HP BladeSystem can lower costs through automation, virtualization and improved IT efficiency. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Securing your network begins at the gateway, also called the perimeter, to keep unauthorized users, viruses and malicious code from entering your systems. Deploying multilayer technologies is your first line of defense. With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. One of the key facets of a successful security strategy is protecting the servers that run critical applications and house so much of your essential data. Having the right policies, procedures and server configurations is critical.
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.
Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.
Preston Gralla: Apple plays the bully again
Apple is once again unleashing its attack dog lawyers. This time against a college for using an apple in its logo. ... [more]