Vulnerability Development mailing list archives

Re: Cisco Catalyst switches


From: rpc () INETARENA COM (rpc)
Date: Tue, 13 Jun 2000 21:20:02 -0700


On Tue, 13 Jun 2000, Andy Murren wrote:

: It would be interesting if there was a vulnerability that allowed you to
: break the VLAN definitions.. I know many companies that practically run
: their entire networks together into several Catalysts via VLANS :) Secure
: networks and public ones right next to each other.
:
: I thought that based on the nature of VLANS that they would not be
: susceptible to attack from the network layer because they switch traffic
: based on the port number, not on any content of the frame or packet? Still,
: it would be interesting :)
:

What about redefining the VLANs in the config?  Of course that would
require getting control of the switch.


that's what we have snmp for :D

--rpc <h () ckz org>


Current thread: