Major IOS Vulnerabilities!

[Jay Greenberg]

Just released yesterday. Here's my synopsis on what you should be doing with IOS, I hope it will be helpful.

1) TCP Vulnerability
http@//www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
Impact: Attacker could reset your BGP sessions
Enable MD5 encryption on all your BGP sessions
Router(config-router)#nei x.x.x.x password <password>

2) SNMP Vulnerability
http@//www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml
Impact: Attacker could reboot these routers continuously.
Fix: upgrade code, or in the mean time, disable snmp server or affected devices (see URL for affected devices)
Router(config)#no snmp-server

Good Luck guys!