nanog mailing list archives
Re: IOS Rookit: the sky isn't falling (yet)
From: Gadi Evron <ge () linuxbox org>
Date: Tue, 27 May 2008 11:02:32 -0500 (CDT)
On Tue, 27 May 2008, Jared Mauch wrote:
On May 27, 2008, at 8:42 AM, Alexander Harrowell wrote:An alternative rootkit ? Privilege level 16 used by the Lawful Intercept [12] feature could be abused to do some of this too. Or the other wayaround: use a "patched" IOS to keep an eye on Law Enforcement's >operationson the router as privilege level 15 doesn't allow it and the onlyalternative is to sniff the traffic export.The combination of rootkits and specially privileged Lawful Intercept functions is a very dangerous one. This was precisely what was exploited in the now-legendary and still unsolved Vodafone Greece hack.Perhaps the above should be simplified. Running a hacked/modded IOS version is a dangerous prospect.This seems like such a non-event because what is the exploit path to load the image? There needs to be a primary exploit to load the malware image.*yawn*
I guess we will wait for the next one before waking up, than.
- Jared
Gadi.
Current thread:
- IOS Rookit: the sky isn't falling (yet) Nicolas FISCHBACH (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Alexander Harrowell (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Christopher Morrow (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Jared Mauch (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Gadi Evron (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Adrian Chadd (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Chris Grundemann (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Adrian Chadd (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) goemon (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Sargun Dhillon (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Sean Donelan (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) goemon (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Alexander Harrowell (May 27)