Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: PIX Privilege Escalation Vulnerability

from [Aaron Collins] Network Security [Permanent Link]
Subject: Re: PIX Privilege Escalation Vulnerability
Date: Mon, 25 Feb 2008 09:40:08 -1000
I tried this on my 515E with 'Cisco PIX Security Appliance Software Version 7.1(1)' I also uses radius for auth, and I couldn't reproduce this exploit. This may just be a 7.1 issue.

tbbunn@ctc.net wrote: 
I actually was able to reproduce this attack multiple times, and did verify 
that there was an enable secret password configured(as well as multiple 
User/Passwords on the TTY line, not that they should matter) . I will not be in 
my lab until Tuesday of next week, but I will reproduce this again and copy the 
exact configuration. I can not really argue any points until then. I really 
appreciate you'll looking into the matter. Again this was reproduced on a PIX 
515E running v7.2 of Finesse.

Terry Bunn,CCNA tbbunn@ctc.net



--
-Aaron Collins
Systems Engineer/ Release Engineer
Hawaii Information Consortium
220 S. King St. Suite 2190
Honolulu, Hawaii 96813
Cell: 808.203.8756
Office: 808.587.4213

************************************************************
CONFIDENTIALITY NOTICE:
This email and any attachments are confidential.  If you
are not the intended recipient, you do not have permission
to disclose, copy, distribute, or open any attachments.  If
you have received this email in error, please notify us
immediately by returning it to the sender and delete this
copy from your system.
************************************************************

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [ MDVSA-2008:026 ] - Updated icu packages fix vulnerabilities, security
Next by Date:  Two vulnerabilities for PatchLink Update Client for Unix., lcashdol
Previous by Thread:  Re: Re: PIX Privilege Escalation Vulnerability, tbbunn
Next by Thread:  [ MDVSA-2008:025 ] - Updated x11-server-xgl packages fix multiple vulnerabilities, security
Indexes:  [Date] [Thread] [Top] [All Lists]