full-disclosure - Re: Should nmap cause a DoS on cisco routers?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-id: <086f01cb1a40$3f46e130$bdd4a390$@net>
Date: Fri, 02 Jul 2010 19:42:34 -0400
From: AMILABS <amilabs@...online.net>
To: "'Dobbins, Roland'" <rdobbins@...or.net>, full-disclosure@...ts.grok.org.uk
Subject: Re: Should nmap cause a DoS on cisco routers?

Look at my old report from 03 on how an IOS bug can be exploited from just
one packet. It may provide some ideas for those wanting to test this Nmap
issue. 

http://amilabs.com/ami-ciscoexploit.pdf

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Dobbins,
Roland
Sent: Thursday, July 01, 2010 9:31 PM
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Should nmap cause a DoS on cisco routers?

On Jul 2, 2010, at 8:13 AM, Lee wrote:

>  so presumably the scan came from a network that had full access to the
routers.

One question is whether or not the network in question *should* have full
access to the management plane of the routers.

;>

>  That's a bit harder to defend against.

Sure, but also note that CoPP, HWRL, and the like can help, depending upon
the platform.

Don't get me wrong; this should be investigated further, and PSIRT are on
it.  My point is that folks don't need to go into panic mode, but should
educate themselves as to how to defend their network infrastructure against
attack and then deploy the relevant BCPs.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins@...or.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/