Full Disclosure mailing list archives

Re: CISCO Pix VPN Group Enumeration


From: "Zed Qyves" <zqyves.spamtrap () gmail com>
Date: Wed, 12 Jul 2006 16:31:33 +0300

Andreas,

although I think it is specific to VPN concentrators, this is what I
think you are refering to:

http://www.nta-monitor.com/posts/2005/06/cisco-concentrator-groupname-enumeration-vulnerability.html

and

http://www.nta-monitor.com/posts/2005/01/VPN-Flaws-Whitepaper.pdf

you need ike-scan, available from the aforementioned website as well

ZQ

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: