mailing list archives
Creating Backdoors in Cisco IOS using Tcl
From: "IRM Research" <research () irmplc com>
Date: Tue, 27 Nov 2007 10:48:39 -0000
Tcl (Tool Command Language) is a scripting language used extensively in
embedded systems, which is easy to use and has some powerful features.
The language has been supported by Cisco IOS for some time now and is
used, for example, in IOS IVR configuration as well as for automating
mundane tasks regularly performed by network administrators. This short
technical briefing describes a technique using Tcl to create a backdoor
within IOS that would allow a remote attacker to execute privileged
commands on a networking device. The document (which includes a
proof-of-concept Tcl script) can be downloaded here:
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- Creating Backdoors in Cisco IOS using Tcl IRM Research (Nov 27)