full-disclosure - Cisco CSS WebNS ssh crash

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <46D6EA1C.1030007@tiscali.it>
Date: Thu, 30 Aug 2007 18:02:36 +0200
From: NetExpress <NetExpress@...cali.it>
To: BugTraq <bugtraq@...urityfocus.com>, 
	FullDisclosure <full-disclosure@...ts.grok.org.uk>
Subject: Cisco CSS WebNS ssh crash

Undocument bug on Cisco CSS series 11000 with Webns 8.20.0.1

Cisco CSS series 11000 with webns system and ssh daemon crash on  ssh 
crc32 old 2001 exploit


Cisco CSS :
Webns Version:  08.20.0.01  (using command sh ver)
SSH Version: SSHield version 1.6.1, SSH version OpenSSH_3.0.2p1 (using 
command sh sshd version)

CSS is default configured with max 5 concurrency session

with old shack exploit css does not relase connection and when it get 5 
connection it crashes with no other possibility of connection

Alessandro Fiorenzi  aka NetExpress

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/