lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 30 Aug 2007 18:02:36 +0200
From: NetExpress <NetExpress@...cali.it>
To: BugTraq <bugtraq@...urityfocus.com>,
	FullDisclosure <full-disclosure@...ts.grok.org.uk>
Subject: Cisco CSS WebNS ssh crash

Undocument bug on Cisco CSS series 11000 with Webns 8.20.0.1

Cisco CSS series 11000 with webns system and ssh daemon crash on  ssh 
crc32 old 2001 exploit


Cisco CSS :
Webns Version:  08.20.0.01  (using command sh ver)
SSH Version: SSHield version 1.6.1, SSH version OpenSSH_3.0.2p1 (using 
command sh sshd version)

CSS is default configured with max 5 concurrency session

with old shack exploit css does not relase connection and when it get 5 
connection it crashes with no other possibility of connection

Alessandro Fiorenzi  aka NetExpress

Powered by blists - more mailing lists