full-disclosure - Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 10 Oct 2007 21:18:42 +0530
From: "crazy frog crazy frog" <i.m.crazy.frog@...il.com>
To: Gaus <gaus@...co.com>, full-disclosure@...ts.grok.org.uk, 
	"Andy Davis" <andy.davis@...plc.com>
Subject: Re: IRM Demonstrates Multiple Cisco IOS
	Exploitation Techniques

> Cisco and IRM agree that the videos do not demonstrate or represent a
> vulnerability in Cisco IOS. Specifically, the code to manipulate
> Cisco IOS could be inserted only under the following conditions:
>
> - Usage of the debugger functionality present in IOS
>
> - Having physical access to the device
>
> - Already logged in at the highest privilege level on the device.
>

will it work if any of the above condition is true or all the above
conditions needs to be true?

-- 
---------------------------------------
there is a contest on secgeeks:
http://secgeeks.com/announcing_secgeeks_contest.html
register here:-
http://secgeeks.com/user/register
rss feeds :-
http://secgeeks.com/node/feed

http://www.newskicks.com
Submit and kick for new stories from all around the world.
---------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/