Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: Cisco VPN Concentrator GUI |
|---|---|
| Date: | Mon, 16 May 2005 09:21:19 -0500 |
Are you sure that it's not the SSL VPN Interface for remote access? By default the administration interface is only accessible from the inside interface, which means that it wouldn't be publicly available to the Internet unless somebody purposely made it available. James Williams, GISF Network Systems Technician -----Original Message----- From: kaps lock [mailto:kapsloc1978@yahoo.com] Sent: Sunday, May 15, 2005 10:09 PM To: pen-test@securityfocus.com Subject: Cisco VPN Concentrator GUI hi all, i am pen-testing one of our clients and am seeing their web interface to the vpn concentrator (cisco) available publicly on the internet with the username /password page. How could i explain somebody tht it can be exploited...am sure this is not a good idea to hav ur vpn concnetrator interface on the public internet..but i cant find any vulenrabilites on the net ....to explain to the person....only thing i can think of is brute forcing the username pasword field...which is again a challenge for web vpn..any ideas?? thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Cisco VPN Concentrator GUI, Stephen Hassard |
|---|---|
| Next by Date: | Re: Wireless cards, rusty chiles |
| Previous by Thread: | RE: Cisco VPN Concentrator GUI, Todd Towles |
| Next by Thread: | RE: Cisco VPN Concentrator GUI, Johnson, Joey |
| Indexes: | [Date] [Thread] [Top] [All Lists] |