Cisco IOS FTP Backdoor Ripe for Hackers


Another flaw in Cisco’s IOS, this time a problem with FTP, the mechanism used to update the firmware on Cisco devices (routers & switches mostly).

You really don’t want someone playing around with your configuration files on your router do you?

IOS FTP, which comes disabled by default in IOS, is used to upload IOS software images and other software to routers and switches remotely. However, Cisco says attackers could exploit a vulnerability in the FTP server to gain access to the file system of an IOS-based router or switch and affect configuration settings.

“Unauthorized users could retrieve the device’s startup-config file from the filesystem,” Cisco says.”This file may contain information that could allow the attacker to gain escalated privileges.”

You can shutdown the FTP service on the IOS for the moment to be safe, and wait for the update.

The command is detailed below:

You could also setup an access control list to limit access to FTP.

In the meantime, Cisco says users should shut down IOS FTP if they are running the server on an affected system. (The command to do this is ‘ftp-server enable’.) The company says users can upload software to IOS devices through other methods, such as the ‘Secure Copy’ feature in the software. Users can also set up access control lists to restrict FTP access to a router or switch, Cisco adds.

The affected IOS versions are: 11.3, 12.0, 12.1, 12.2, 12.3 and 12.4. Cisco’s IOS XR is not vulnerable, and non-IOS Cisco devices are also safe.

So be careful if you are using Cisco kit, this is quite a bad hole.

Source: Network World

Posted in: Exploits/Vulnerabilities, Networking Hacking

, ,


Latest Posts:


HiddenWall - Create Hidden Kernel Modules HiddenWall – Create Hidden Kernel Modules
HiddenWall is a Linux kernel module generator used to create hidden kernel modules to protect your server from attackers.
Anteater - CI/CD Security Gate Check Framework Anteater – CI/CD Security Gate Check Framework
Anteater is a CI/CD Security Gate Check Framework to prevent the unwanted merging of filenames, binaries, deprecated functions, staging variables and more.
Stardox - Github Stargazers Information Gathering Tool Stardox – Github Stargazers Information Gathering Tool
Stardox is a Python-based GitHub stargazers information gathering tool, it scrapes Github for information and displays them in a list tree view.
ZigDiggity - ZigBee Hacking Toolkit ZigDiggity – ZigBee Hacking Toolkit
ZigDiggity a ZigBee Hacking Toolkit is a Python-based IoT (Internet of Things) penetration testing framework targeting the ZigBee smart home protocol.
RandIP - Network Mapper To Find Servers RandIP – Network Mapper To Find Servers
RandIP is a nim-based network mapper application that generates random IP addresses and uses sockets to test whether the connection is valid or not with additional tests for Telnet and SSH.
Nipe - Make Tor Default Gateway For Network Nipe – Make Tor Default Gateway For Network
Nipe is a Perl script to make Tor default gateway for network, this script enables you to directly route all your traffic from your computer to the Tor network.


One Response to Cisco IOS FTP Backdoor Ripe for Hackers

  1. Daniel June 4, 2007 at 8:48 am #

    another in the eternal stream of router vulns/sploits