RE: lug-bg: Fwd: Bug in Cisco CBOS v2.3.0.053

[bkrosnov@xxxxxxxx (Boyan Krosnov)]

to shtoto sigurno adsl-cheto si misli che ima samo edna konzola i
pechata na neq.
kato se telnetnesh i prevkljuchwa na nowata konzola. typo naistina ama
chesto se sluchwa s drebnite device-i
primerno aironet bridgowete pechatat syobshteniqta za greshki kydeto im
padne iz web interface-a. koeto strashno go omazwa ponqkoga.

golqmo shtastie e che nqma masowo CBOS bazirani ustrojstwa w bylgaria.

BR,

--
Boyan Krosnov (http://www.nat.bg/~bkrosnov)
Network Administrator
Lirex BG Ltd. 

> -----Original Message-----
> From: Stanislav Lechev [mailto:firedust@xxxxxxx]
> Sent: Monday, April 23, 2001 12:38 PM
> To: Linux Users Group - Bulgaria
> Subject: lug-bg: Fwd: Bug in Cisco CBOS v2.3.0.053
> 
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> hmm
> interesen problem :)
> ne e li ?:)
> 
> - ----------  Forwarded Message  ----------
> Subject: Bug in Cisco CBOS v2.3.0.053
> Date: Fri, 20 Apr 2001 11:56:17 +0200
> From: "Povl H. Pedersen" <pedersen@xxxxxxxxxxx>
> To: BUGTRAQ@xxxxxxxxxxxxxxxxx
> 
> 
> Just found a strange bug in Cisco CBOS on the Cisco 677 ADSL router.
> 
> cbos#sh ver
> 
> Cisco Broadband Operating System
> CBOS (tm) 677 Software (C677-I-M), Version v2.3.0.053 - 
> Release Software
> Copyright (c) 1986-2000 by cisco Systems, Inc.
> Compiled Feb 13 2000 17:19:50
> DMT firmware version 0x2219be04
> NVRAM image at 0x1032cd00
> 
> 
> I had doing a "sh nat" with a very long listing in one telnet session.
> 
> When I telnetted from another machine, the c677 switched output to
> that connection before prompting for password.
> 
> The listing would continue in whatever telnet window had the last
> keypress. Also seemd to screw up something on the first terminal.
> 
> I see this as a serious security flaw.
> - --
> _______________________________________________________________
> 
> M E T R O C O M I A
> Denmark - Uganda - Malaysia - Bangladesh
> Member of the Catenas Global Network
> 
> Povl H. Pedersen, CTO
> E-mail: pope@xxxxxxxxxxxxx
> Direct phone: +45 86 76 23 49
> Mobile phone: +45 40 93 55 11
> 
> Metrocomia A/S
> Aaboulevarden 70,4., DK-8000 Aarhus C, Denmark
> Phone: +45 86 76 23 33  -  Fax: +45 86 76 23 32
> URL Denmark:  http://www.metrocomia.dk
> URL International: http://www.metrocomia.com
> 
> - -------------------------------------------------------
> 
> - -- 
> - -===============================================================-
> - - Regards,                                            AngelFire -
> - -     Stanislav Lechev                    <firedust@xxxxxxx>    -
> - -    PGP Key: http://firedust.vega.bg/pgp/StanislavLechev.asc   -
> - -===============================================================-
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.4 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iD8DBQE64/gI8RPXBhiMqewRAj14AJ91pwgq53gdH4loKlUK4Vkcn5f+6ACdFY3w
> TBAGwz619cGshsYwuAX0jkU=
> =ntvX
> -----END PGP SIGNATURE-----
> ==============================================================
> =============
> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
> http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. 
> - Stara Zagora
> 

===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora