full-disclosure - Re: "debug k" freezing Cisco routers?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20070801185114.13234382.fx@sabre-labs.com>
Date: Wed, 1 Aug 2007 18:51:14 +0200
From: Felix 'FX' Lindner <fx@...re-labs.com>
To: "Shawn Merdinger" <shawnmer@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: "debug k" freezing Cisco routers?

Hi Shawn,

On Wed, 1 Aug 2007 10:14:47 -0600 "Shawn Merdinger"
<shawnmer@...il.com> wrote:
> At level 15 permissions, when I enter "debug k" on the CLI the router
> freezes immediately, requiring a manual reboot.
> 
> While not a vulnerability per se, perhaps something to keep in mind
> from the fat-finger risk?

the full command is "debug kernel", and it halts the IOS kernel since
it will be in suspended state waiting for the serial line GDB debugger
to be attached and tell him to continue. Hence the freeze. 

BinNavi with GDB agent can use the serial line protocol to single-step
the IOS kernel. You can also just patch any gdb source you have around.

cheers
FX

-- 
????? Labs GmbH            | Felix 'FX' Lindner <fx@...re-labs.com> 
http://www.?????-labs.com  | GSM: +49 171 7402062
Wrangelstrasse 4           | PGP: A740 DE51 9891 19DF 0D05  
10997 Berlin, Germany      |      13B3 1759 C388 C92D 6BBB
HRB 105213 B, Amtsgericht Charlottenburg, GF Felix Lindner

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/