Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

RE: previledge password in cisco routers
From: "Gary E. Miller" <gem () rellim com>
Date: Wed, 24 Nov 2004 11:20:21 -0800 (PST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo Todd!

On Wed, 24 Nov 2004, Todd Towles wrote:

Do you seriously think there is a easy way to get the enable password
remotely?

Cisco has previously had bugs that allowed easy enable password recovery
remotely using SNMP and the web management interface.  If it is an older
unpatched router, showing one of these services to you, then a search of
standard exploits will turn up what you need.

There was a particularly nasty telnet hack a while back.  Even if you
had an ACL on the port you were easily hacked.

If past performance is any indicator or future performance then there
will again be a Cisco bug, or sloppy admin,  that allows this.

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
        gem () rellim com  Tel:+1(541)382-8588 Fax: +1(541)382-8676

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBpN748KZibdeR3qURAh6DAJ4zZnYcMO0uhg6lfs83ScS3IpsVxgCgiVBK
9rIjcwwiaIDhHAK15G8x0wk=
=wREb
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]