[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] Cisco ACE XML Gateway <= 6.0 Internal IP
From:       Valdis.Kletnieks () vt ! edu
Date:       2009-09-25 14:40:57
Message-ID: 3187.1253889657 () turing-police ! cc ! vt ! edu
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


On Fri, 25 Sep 2009 14:53:52 +1000, Richard Cyrios said:

> >> 24/09/2009    Tonight!, the vulnerability goes public and PSIRT is informed.

I'd have expected that PSIRT knew about it before...

> .... and the world is thrown into chaos via an internal IP being disclosed.

Well, in the greater scheme of things, it's not "thrown into chaos" level of
bug.  It's just information leakage.  How serious it *reallu* is depends on
what the attacker can do with the info - it tells them an IP and a guess at
a subnet that probably has *other* high-value targets on it.

Now where it gets *fun* is if you already have a box on the *inside*, but
need more recon info on the network layout.  At that point, it could become
"Well, I pwned a desktop in 192.168.117/24 - but it looks like the *good*
stuff may be over in 10.95.12/22."


[Attachment #5 (application/pgp-signature)]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]