Article View: comp.dcom.sys.cisco
Article #2248Re: IOS exploit: please disclose vehicle, not mechanism
From: Bill Johnston
Date: Thu, 24 Jul 2003 17:54
Date: Thu, 24 Jul 2003 17:54
26 lines
2598 bytes
2598 bytes
Adrian Jensen <ad_jensen@hotmail.com> wrote in news:3F1FF243.7010205@hotmail.com: > As for the exploit code itself. I've seen it, downloaded it, compiled > it. It works as advertised, just a simple command line utility. Give > it the IP to attack and the proper TTL, you have to be just slightly > smarter than a script kiddie to use it. Thank you. This is a helpful response. The "vehicle", at present, is therefore not yet something that is likely to be plonked surreptiously onto clueless users' desktops inside private networks. Knowing this *is* useful for Cisco admins who have to prioritize their response among many boxes, both at the public edge and at the core of the network. - Bill -- Bill Johnston Johnston Network Consulting Services 14758 Chisholm Landing Way Gaithersburg, MD 20878 301-717-8894 wdj-netconsult@consultant.com
Technical Details
Message-ID:
<Xns93C28D549C9F6wdjohnstoncomcastnet@206.127.4.25>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!canoe.uoregon.edu!arclight.uoregon.edu!wn13feed!wn12feed!wn14feed!worldnet.att.net!216.166.71.14!border3.nntp.aus1.giganews.com!intern1.nntp.aus1.giganews.com!nntp.giganews.com!nntp.comcast.com!news.comcast.com.POSTED!not-for-mailReferences:
<Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <nnITa.64552$R92.35099@news2.central.cox.net> <3F1FF243.7010205@hotmail.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,536b22101f44acbf X-Google-Attributes: gidf922c,public X-Google-Thread: 114395,536b22101f44acbf X-Google-Attributes: gid114395,public X-Google-Thread: 102702,536b22101f44acbf X-Google-Attributes: gid102702,public X-Google-ArrivalTime: 2003-07-24 10:54:20 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!canoe.uoregon.edu!arclight.uoregon.edu!wn13feed!wn12feed!wn14feed!worldnet.att.net!216.166.71.14!border3.nntp.aus1.giganews.com!intern1.nntp.aus1.giganews.com!nntp.giganews.com!nntp.comcast.com!news.comcast.com.POSTED!not-for-mail NNTP-Posting-Date: Thu, 24 Jul 2003 12:54:19 -0500 Newsgroups: comp.dcom.sys.cisco,ios.general,comp.security.firewalls Subject: Re: IOS exploit: please disclose vehicle, not mechanism From: Bill Johnston <wdj-netconsult@consultant.com> References: <Xns93C1BACF3C55Awdjohnstoncomcastnet@206.127.4.25> <LqFTa.116237$wk6.30285@rwcrnsc52.ops.asp.att.net> <nnITa.64552$R92.35099@news2.central.cox.net> <3F1FF243.7010205@hotmail.com> Organization: Johnston Network Consulting Services Message-ID: <Xns93C28D549C9F6wdjohnstoncomcastnet@206.127.4.25> User-Agent: Xnews/L5 Date: Thu, 24 Jul 2003 12:54:19 -0500 Lines: 26 NNTP-Posting-Host: 68.50.36.39 X-Trace: sv3-IWya6jtxBDjVrA5VD70LLeLRNRvt0ufxg3vj94AImq8nUzfIAqEikVCXflxMRYw+dS89Pwa8tCHezLe!GY2Ct4c9ZwdJJJaMcIaJIuk9/ZC7QkF2vHhXEw9Rt1LHbXtY24mPBdCjoM9BiJjltn2qFdAvPQvn!H3A= X-Complaints-To: abuse@comcast.net X-DMCA-Complaints-To: dmca@comcast.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1