<<< Date Index >>>     <<< Thread Index >>>

Re: PIX Privilege Escalation Vulnerability



I tried this on my 515E with 'Cisco PIX Security Appliance Software Version 7.1(1)' I also uses radius for auth, and I couldn't reproduce this exploit. This may just be a 7.1 issue.

tbbunn@xxxxxxx wrote:
I actually was able to reproduce this attack multiple times, and did verify 
that there was an enable secret password configured(as well as multiple 
User/Passwords on the TTY line, not that they should matter) . I will not be in 
my lab until Tuesday of next week, but I will reproduce this again and copy the 
exact configuration. I can not really argue any points until then. I really 
appreciate you'll looking into the matter. Again this was reproduced on a PIX 
515E running v7.2 of Finesse.

Terry Bunn,CCNA tbbunn@xxxxxxx



--
-Aaron Collins
Systems Engineer/ Release Engineer
Hawaii Information Consortium
220 S. King St. Suite 2190
Honolulu, Hawaii 96813
Cell: 808.203.8756
Office: 808.587.4213

************************************************************
CONFIDENTIALITY NOTICE:
This email and any attachments are confidential.  If you
are not the intended recipient, you do not have permission
to disclose, copy, distribute, or open any attachments.  If
you have received this email in error, please notify us
immediately by returning it to the sender and delete this
copy from your system.
************************************************************