Re: IOS exploit: please disclose vehicle, not mechanism

Article View: comp.dcom.sys.cisco

Article #2247

Back to comp.dcom.sys.cisco Previous Next

#2247

From: Adrian Jensen
Date: Thu, 24 Jul 2003 14:50

25 lines
2759 bytes

Jeff C wrote:
[snip]
> 
> Like you we placed the access-lists up nearly immeadately and as we have 
> to opportunity to upgrade IOS we can remove them.  One thing that I 
> noticed is that I didn't get any hits.  Have you noticed any hits on 
> yours?
> 

I've got an administrator friend at a local hosting company here. 
Talking to him the other day, he is seeing 2 or 3 attempted exploits 
(seemingly random atttacks) a day in their IP space.

As for the exploit code itself. I've seen it, downloaded it, compiled 
it. It works as advertised, just a simple command line utility. Give it 
the IP to attack and the proper TTL, you have to be just slightly 
smarter than a script kiddie to use it.

Adrian

-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----==  Over 80,000 Newsgroups - 16 Different Servers! =-----

Technical Details

Message-ID: <3F1FF243.7010205@hotmail.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-out.superfeed.net!local!corp.newsgroups.com!not-for-mail

References:

<Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <nnITa.64552$R92.35099@news2.central.cox.net>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,536b22101f44acbf
X-Google-Attributes: gidf922c,public
X-Google-Thread: 114395,536b22101f44acbf
X-Google-Attributes: gid114395,public
X-Google-Thread: 102702,536b22101f44acbf
X-Google-Attributes: gid102702,public
X-Google-ArrivalTime: 2003-07-24 07:47:36 PST
Message-ID: <3F1FF243.7010205@hotmail.com>
Date: Thu, 24 Jul 2003 07:50:43 -0700
From: Adrian Jensen <ad_jensen@hotmail.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.9) Gecko/20020513
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: comp.dcom.sys.cisco,ios.general,comp.security.firewalls
Subject: Re: IOS exploit: please disclose vehicle, not mechanism
References: <Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <nnITa.64552$R92.35099@news2.central.cox.net>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: 208.1.29.58
X-Trace: corp.newsgroups.com 1059058071 208.1.29.58 (24 Jul 2003 09:47:51 -0500)
Lines: 25
X-Comments: This message was posted through Newsfeeds.com
X-Comments2: IMPORTANT: Newsfeeds.com does not condone, nor support,  spam or any illegal or copyrighted postings.
X-Comments3: IMPORTANT: Under NO circumstances will postings containing illegal or copyrighted material through this service be tolerated!!
X-Report: Please report illegal or inappropriate use to <abuse@newsfeeds.com>
X-Abuse-Info: Please be sure to forward a copy of ALL headers, INCLUDING the body (DO NOT SEND ATTACHMENTS)
Organization: Newsfeeds.com http://www.newsfeeds.com 100,000+ UNCENSORED Newsgroups.
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-out.superfeed.net!local!corp.newsgroups.com!not-for-mail

Reply to Parent Message