Re: Cisco IOS Vulnerablity

[Chris Harrington <charrington () NITROSECURITY COM>]

Jeff Kell wrote:
> My take is sort of an extension to the rootshell part of Lynn's
> controversial Blackhats presentation a few months back.  This isn't a
> new vulnerability in and of itself, but a new and dangerous way to
> exploit IOS once you get there.
Jeff is right. This vulnerability does not provide an insertion point
for injection of malcode. This vuln represents the next step of an
attack that would allow execution of injected malcode. An additional
vulnerability, like the IPv6 issue that Lynn used is required to inject
the malcode.

--Chris

--
Christopher Harrington
Chief Technology Officer
nitrosecurity
o: 603.766.8160
c: 603.969.0592
w: www.nitrosecurity.com
Skype: chrisharrington