full-disclosure - Re: "debug k" freezing Cisco routers?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <38D04BF3A4B7B2499D19EB1DB54285EA05438901@FNB1EX01.gci.com>
Date: Wed, 1 Aug 2007 09:27:31 -0800
From: "Leif Sawyer" <lsawyer@....com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Re: "debug k" freezing Cisco routers?

 You didn't mention what version of IOS, nor what type of router.

InetSadcLabGw-1>ena
Password: 
InetSadcLabGw-1#debug k?
kerberos  kron  

InetSadcLabGw-1#debug k
% Ambiguous command:  "debug k"
InetSadcLabGw-1#sho ver

Cisco Internetwork Operating System Software 
IOS (tm) s6523_rp Software (s6523_rp-ADVIPSERVICESK9-M), Version
12.2(18)ZU1, RELEASE SOFTWARE (fc1)

And it seems that you should have.

> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk 
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf 
> Of Shawn Merdinger
> Sent: Wednesday, August 01, 2007 8:15 AM
> To: full-disclosure@...ts.grok.org.uk
> Subject: [Full-disclosure] "debug k" freezing Cisco routers?
> 
> Hi All,
> 
> At level 15 permissions, when I enter "debug k" on the CLI 
> the router freezes immediately, requiring a manual reboot.
> 
> While not a vulnerability per se, perhaps something to keep 
> in mind from the fat-finger risk?
> 
> Anyone else seeing this?
> 
> Kindest regards,
> --scm
> 
> 
> Shawn Merdinger
> Independent Security Researcher
> VoIPninja.com
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/