$this->articleCE->primaryUrlById(3838381) = /security/article.php/3838381/Cisco+Patches+Critical+TCP+Vulnerability.htm
Cisco Patches Critical TCP Vulnerability - InternetNews.
RealTime IT News
   

Cisco Patches Critical TCP Vulnerability

By Sean Michael Kerner   |    September 09, 2009
Page 1 of 1


Netstat -vat by Sean Michael Kerner (bio)

A command line view of IT

From the 'Bigger Than DNS' files:

Cisco (NASDAQ:CSCO) now has a critical patch out for its IOS operating system fixing a TCP flaw that could trigger a Denial of Service (DoS) condition.

The TCP flaw is similar in nature to one that Microsoft patched as part of its September Patch Tuesday update. TCP is the core transport protocol for most web traffic and the flaw is one that is not trivial.

"By manipulating the state of a TCP connection, an attacker could force the TCP connection to remain in a long-lived state, possibly indefinitely," Cisco warns in its advisory. "If enough TCP connections are forced into a long-lived or indefinite state, resources on a system under attack may be consumed, preventing new TCP connections from being accepted."

In other words, a flaw in TCP could have enabled a DoS attack.

[Continue reading this blog post at Netstat -vat by Sean Michael Kerner]