The networking giant only yesterday disclosed the flaw, even though it has know about it since July. The security hole first became known at the Black Hat security conference in July, when security expert Michael Lynn showed how to take control of Cisco routers using the security flaw. Cisco then squashed making the flaw public by going to court and getting a restraining order against publicly disclosing the security hole.
Cisco has issued an advisory and patch detailing the flaw and how to fix the hole. As with many other security holes, it exploits a heap-based buffer overflow vulnerability that allows hackers to take control of a router or switch.
The security hole affects all Cisco products that run IOS.
Stay connected and informed by visiting our Enterprise IT Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government, Retail and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.