nanog mailing list archives
Re: IOS Rookit: the sky isn't falling (yet)
From: Jared Mauch <jared () puck nether net>
Date: Tue, 27 May 2008 11:41:17 -0400
On May 27, 2008, at 8:42 AM, Alexander Harrowell wrote:
An alternative rootkit ? Privilege level 16 used by the Lawful Intercept[12] feature could be abused to do some of this too. Or the other wayaround: use a "patched" IOS to keep an eye on Law Enforcement's >operationson the router as privilege level 15 doesn't allow it and the onlyalternative is to sniff the traffic export.The combination of rootkits and specially privileged Lawful Interceptfunctions is a very dangerous one. This was precisely what was exploited inthe now-legendary and still unsolved Vodafone Greece hack.
Perhaps the above should be simplified. Running a hacked/modded IOS version is a dangerous prospect.This seems like such a non-event because what is the exploit path to load the image? There needs to be a primary exploit to load the malware image.
*yawn* - Jared
Current thread:
- IOS Rookit: the sky isn't falling (yet) Nicolas FISCHBACH (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Alexander Harrowell (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Christopher Morrow (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Jared Mauch (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Gadi Evron (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Adrian Chadd (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Chris Grundemann (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Adrian Chadd (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) goemon (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Valdis . Kletnieks (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Sargun Dhillon (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Sean Donelan (May 27)
- Re: IOS Rookit: the sky isn't falling (yet) Alexander Harrowell (May 27)