nanog mailing list archives
Re: IOS Rookit: the sky isn't falling (yet)
From: "Alexander Harrowell" <a.harrowell () gmail com>
Date: Tue, 27 May 2008 13:42:23 +0100
An alternative rootkit ? Privilege level 16 used by the Lawful Intercept [12] feature could be abused to do some of this too. Or the other way around: use a "patched" IOS to keep an eye on Law Enforcement's >operations
on the router as privilege level 15 doesn't allow it and the only
alternative is to sniff the traffic export.
The combination of rootkits and specially privileged Lawful Intercept functions is a very dangerous one. This was precisely what was exploited in the now-legendary and still unsolved Vodafone Greece hack. Alex
Current thread:
- IOS Rookit: the sky isn't falling (yet) Nicolas FISCHBACH (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Alexander Harrowell (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Christopher Morrow (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Jared Mauch (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Gadi Evron (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Adrian Chadd (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Chris Grundemann (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Adrian Chadd (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) goemon (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Alexander Harrowell (May 27)