full-disclosure - CISCO Pix VPN Group Enumeration

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BAY107-F35EC98EA618E11F59A9614B8690@phx.gbl>
Date: Wed Jul 12 13:58:47 2006
From: andymolinetti at hotmail.com (Andres Molinetti)
Subject: CISCO Pix VPN Group Enumeration

List,

    While doing a Pentest for a client I found a Cisco Pix IPSEC VPN
with PSK auth and Aggressive mode enabled. I'm searching for a script
that exploits the vulnerability "Cisco IPSec VPN Implementation Group
Name Enumeration Vulnerability" that is detailed here :
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_security_notice09186a00804a7912.html
. Does anyone know of any exploits available for this one?

Thanks,

Andy.

_________________________________________________________________
Descarga gratis la Barra de Herramientas de MSN 
http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www.hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH