RE: Shrubbery's tac_plus - inclusion in other products?

[Drew Weaver via NANOG <nanog () lists nanog org>]

I think that Facebook's abandoned tacplus was based on shrubbery's but I'm not sure.

-Drew


-----Original Message-----
From: Royce Williams via NANOG <nanog () lists nanog org> 
Sent: Wednesday, September 23, 2026 6:00 PM
To: North American Network Operators Group <nanog () lists nanog org>
Cc: Royce Williams <royce () techsolvency com>
Subject: Shrubbery's tac_plus - inclusion in other products?

Do any TACACS+-speaking solutions (current or legacy) have a basis on the Shrubbery fork of tac_plus?

There's an unauth'd RCE in just about all versions (no CVE yet):

https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_elttam_publications_blob_master_writeups_elttam-2Dtac-5Fplus-5Frce-5Ffmtstring-5Fadvisory.txt&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=P4yMaLMt7_Y1DKgbkUcQFzi3cY9Dh55_g18Mh0YB-8dEvGkR7IVq9UHGxin8i-Ow&s=GztpdM_T0RwX1tqgNXKgom_VxdSBS10VFFijoEVYBGI&e=

Some threat-intel folks are collecting what we know here (disclosure:
my post, but it's volunteer), so if anyone replies (here or on the side), I'll update here:

https://urldefense.proofpoint.com/v2/url?u=https-3A__ifin.network_t_cve-2Dpending-2Dpre-2Dauth-2Dformat-2Dstring-2Dbug-2Din-2Dtac-2Dplus-2Dshrubbery-2Dnetworks_859_1&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=P4yMaLMt7_Y1DKgbkUcQFzi3cY9Dh55_g18Mh0YB-8dEvGkR7IVq9UHGxin8i-Ow&s=BYkFW55mPH8_9qkQnMtTr8vQYRtQbrIA12Go63vY5fw&e=

I'm interested in legacy / EOL platform info as well -- like some are still in the field. And upstream updates are 
sporadic (until this year when .31 was released, there hadn't been a release since .28 in 2015), so embedding could go 
way back.

I don't have vendor access anymore, so any feedback / corrections appreciated.

--
Royce Williams
Tech Solvency
_______________________________________________
NANOG mailing list
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.nanog.org_archives_list_nanog-40lists.nanog.org_message_AY32ZYSY7ZRWSHNWZF74TNNHVZNYOY5I_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=P4yMaLMt7_Y1DKgbkUcQFzi3cY9Dh55_g18Mh0YB-8dEvGkR7IVq9UHGxin8i-Ow&s=d7uT22hZQSepHE3ZtQE11uwjAIe0bllav3v8os51_WA&e=
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/YGXUGL2KTBH3GHUMLRIOGA4BK73XRUC6/