Re: "debug k" freezing Cisco routers?

[Felix 'FX' Lindner <fx () sabre-labs com>]

Hi Shawn,

On Wed, 1 Aug 2007 10:14:47 -0600 "Shawn Merdinger"
<shawnmer () gmail com> wrote:
> At level 15 permissions, when I enter "debug k" on the CLI the router
> freezes immediately, requiring a manual reboot.
>
> While not a vulnerability per se, perhaps something to keep in mind
> from the fat-finger risk?

the full command is "debug kernel", and it halts the IOS kernel since
it will be in suspended state waiting for the serial line GDB debugger
to be attached and tell him to continue. Hence the freeze. 

BinNavi with GDB agent can use the serial line protocol to single-step
the IOS kernel. You can also just patch any gdb source you have around.

cheers
FX

-- 
????? Labs GmbH            | Felix 'FX' Lindner <fx () sabre-labs com> 
http://www.?????-labs.com  | GSM: +49 171 7402062
Wrangelstrasse 4           | PGP: A740 DE51 9891 19DF 0D05  
10997 Berlin, Germany      |      13B3 1759 C388 C92D 6BBB
HRB 105213 B, Amtsgericht Charlottenburg, GF Felix Lindner

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/