Cisco 678 (and maybe 677) DSL routers are being crashed by the newest codered2 worm.

Cisco initially issued a warning (for the original code red worm) and patch, which basically consisted of saying update to cbos 2.4.2 and disable the web interface with the command

set web disable

but it seems this still leaves port 80 open even though the web server is not there anymore.

To protect your router you also must set the web interface to only respond on an odd port with the following command:

set web port 11111

I've notified cisco but no response yet.

Geo.