Dario Ciccarone (dciccaro) wrote: > > We have reports of some publicly available > BGP looking glasses (which, as we all know, don't require > credentials to login) being crashed due to this issue.
This is probably obvious too, you may crash a RS accessible via telnet (which is usually not passing customer traffic) but in the case of the LG server with larger providers you can usually pick which router (usually key peering or core routers) to run the command on from a drop down list and then possibly remotely crash it. The LG script is just a Web<->telnet/SSH proxy faciliting the DoS in this case... i.e. filter at that level, remove this command from the allowed set in TACACS for the "virtual" user, etc. Nico. -- Nicolas FISCHBACH Senior Manager - Network Engineering/Security - COLT Telecom e:([EMAIL PROTECTED]) w:<http://www.securite.org/nico/> _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
