RE: previledge password in cisco routers

["Gary E. Miller" <gem () rellim com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo Todd!

On Wed, 24 Nov 2004, Todd Towles wrote:

> Do you seriously think there is a easy way to get the enable password
> remotely?

Cisco has previously had bugs that allowed easy enable password recovery
remotely using SNMP and the web management interface.  If it is an older
unpatched router, showing one of these services to you, then a search of
standard exploits will turn up what you need.

There was a particularly nasty telnet hack a while back.  Even if you
had an ACL on the port you were easily hacked.

If past performance is any indicator or future performance then there
will again be a Cisco bug, or sloppy admin,  that allows this.

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
        gem () rellim com  Tel:+1(541)382-8588 Fax: +1(541)382-8676

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBpN748KZibdeR3qURAh6DAJ4zZnYcMO0uhg6lfs83ScS3IpsVxgCgiVBK
9rIjcwwiaIDhHAK15G8x0wk=
=wREb
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html