OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Router worm exploiting poor SNMP security.
From: Ralph Moonen (orbTINK.DEMON.NL)
Date: Fri Dec 15 2000 - 14:29:25 CST


At 12:49 14-12-00 -0800, J Edgar Hoover wrote:

>Remote configuration seems to be more promising. You can add interfaces,
>specify a remote TFTP server from which to load configs or *new firmware*,
>and more.

Don't forget that IOS11.2's source is floating around in hackerland. It
would be
completely possible to create a new/trojaned/alternative IOS load for
cisco's and
upload it. Given enough time, it should be possible to 0wn a substantial
part of the Internet

:-)

--Ralph