[8791] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Cisco IOS 12.0 security bug and workaround

daemon@ATHENA.MIT.EDU (Jason Ackley)
Wed Dec 23 15:34:06 1998

Date: 	Tue, 22 Dec 1998 14:41:44 -0800
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Jason Ackley <jason@ACKLEY.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <19981222160313.6076.qmail@susan.cisco.com>

On Tue, 22 Dec 1998, John Bashinski wrote:

> characterizing it, and can't yet be completely sure which versions
> or which platforms are affected.

Crashes:
IOS (tm) 4000 Software (C4000-IK2S-M), Version 12.0(2)T
(this is an old 68030 based 4000)

IOS (tm) 2500 Software (C2500-IOS56I-L), Version 12.0(2)
(this is a 2514)

> This bug may cause different router platforms to crash differently.
> Some routers have been observed to reboot and claim that they
> were "restarted by power-on"; you won't necessarily get a stack
> trace from one of these crashes.

 C4000 crashed with :
System restarted by address error at PC 0x10006E8, address 0x802320

C2500 crashes with:
System restarted by error - Illegal Instruction, PC 0x0

The 2514 seemed to take a bit longer to crash than the 4000, which was
almost instant death.. Maybe it was just me..

I also noticed that the 4000 at least still is listening on the bootp
server port, even tho I have 'no ip bootp server' set.. bug or feature?

Cheers,

--
Jason Ackley     jason@ackley.net

home help back first fref pref prev next nref lref last post