full-disclosure - previledge password in cisco routers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.61.0411241115471.25077@catbert.rellim.com>
From: gem at rellim.com (Gary E. Miller)
Subject: previledge password in cisco routers

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo Todd!

On Wed, 24 Nov 2004, Todd Towles wrote:

> Do you seriously think there is a easy way to get the enable password
> remotely?

Cisco has previously had bugs that allowed easy enable password recovery
remotely using SNMP and the web management interface.  If it is an older
unpatched router, showing one of these services to you, then a search of
standard exploits will turn up what you need.

There was a particularly nasty telnet hack a while back.  Even if you
had an ACL on the port you were easily hacked.

If past performance is any indicator or future performance then there
will again be a Cisco bug, or sloppy admin,  that allows this.

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
	gem@...lim.com  Tel:+1(541)382-8588 Fax: +1(541)382-8676

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBpN748KZibdeR3qURAh6DAJ4zZnYcMO0uhg6lfs83ScS3IpsVxgCgiVBK
9rIjcwwiaIDhHAK15G8x0wk=
=wREb
-----END PGP SIGNATURE-----