Cisco Catalyst Enable Password Bypass Vulnerability
BID:1122
Info
Cisco Catalyst Enable Password Bypass Vulnerability
| Bugtraq ID: | 1122 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Apr 20 2000 12:00AM |
| Updated: | Apr 20 2000 12:00AM |
| Credit: | This vulnerability was announced by Cisco in a security advisory posted to the Bugtraq mailing list on April 19, 2000. The Cisco BugID for this issue is: CSCdr10025 |
| Vulnerable: |
Cisco Catalyst 6500 5.4.1 Cisco Catalyst 6000 5.4.1 Cisco Catalyst 5500 5.4.1 Cisco Catalyst 5000 5.4.1 Cisco Catalyst 4000 5.4.1 |
| Not Vulnerable: | |
Discussion
Cisco Catalyst Enable Password Bypass Vulnerability
Under certain versions of the Cisco Catalyst a user who already has access to the device can elevate their current access to 'enable' mode without a password. Once 'enable' mode is obtained the user can access the configuration mode and commit unauthorized configuration changes on a Catalyst switch.
This can be done either from the console itself or via a remote Telnet session.
Under certain versions of the Cisco Catalyst a user who already has access to the device can elevate their current access to 'enable' mode without a password. Once 'enable' mode is obtained the user can access the configuration mode and commit unauthorized configuration changes on a Catalyst switch.
This can be done either from the console itself or via a remote Telnet session.
Exploit / POC
Cisco Catalyst Enable Password Bypass Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue that run remote code. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue that run remote code. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco Catalyst Enable Password Bypass Vulnerability
Solution:
The following information has been copied from the Cisco security advisory on this topic, the advisory itself is attached in the 'Credit' section of this vulnerability entry:
Cisco is offering free software upgrades to remedy this vulnerability for all affected customers.
Customers with contracts should obtain upgraded software through their regular update channels. For most customers, this means that upgrades should be obtained via the Software Center on Cisco's Worldwide Web site at:
http://www.cisco.com.
Customers without contracts should get their upgrades by contacting the Cisco Technical Assistance Center (TAC). TAC contacts are as follows:
* +1 800 553 2447 (toll-free from within North America)
* +1 408 526 7209 (toll call from anywhere in the world)
* e-mail: [email protected]
Give the URL of this notice as evidence of your entitlement to a free upgrade. Free upgrades for non-contract customers must be requested through the TAC. Please do not contact either "[email protected]" or "[email protected]" for software upgrades.
Solution:
The following information has been copied from the Cisco security advisory on this topic, the advisory itself is attached in the 'Credit' section of this vulnerability entry:
Cisco is offering free software upgrades to remedy this vulnerability for all affected customers.
Customers with contracts should obtain upgraded software through their regular update channels. For most customers, this means that upgrades should be obtained via the Software Center on Cisco's Worldwide Web site at:
http://www.cisco.com.
Customers without contracts should get their upgrades by contacting the Cisco Technical Assistance Center (TAC). TAC contacts are as follows:
* +1 800 553 2447 (toll-free from within North America)
* +1 408 526 7209 (toll call from anywhere in the world)
* e-mail: [email protected]
Give the URL of this notice as evidence of your entitlement to a free upgrade. Free upgrades for non-contract customers must be requested through the TAC. Please do not contact either "[email protected]" or "[email protected]" for software upgrades.
References
Cisco Catalyst Enable Password Bypass Vulnerability
References:
References:
- Cisco Product Security Incident Response (Cisco Systems)