Re: "debug k" freezing Cisco routers?



In effect the router is unable to process the extremely large list of
stdout k logs.

I see the same effect with "debug" only.

I think that's not a bug, its only a CPU high usage issue.


JNR.

El mié, 01-08-2007 a las 10:05 -0600, Shawn Merdinger escribió:
Hi All,

At level 15 permissions, when I enter "debug k" on the CLI the router
freezes immediately, requiring a manual reboot.

While not a vulnerability per se, perhaps something to keep in mind
from the fat-finger risk?

Anyone else seeing this?

Kindest regards,
--scm

Shawn Merdinger
Independent Security Researcher
VoIPninja.com

Attachment: signature.asc
Description: Esta parte del mensaje =?ISO-8859-1?Q?est=E1?= firmada digitalmente



Relevant Pages

  • Re: how to reconnect my DSL connection
    ... I wrote this to reboot my ADSL router whenever the ... wake up and ping the GATEWAY on the DEVICE. ... # Print a debugging message when DEBUG. ...
    (uk.comp.os.linux)
  • Re: [Full-disclosure] "debug k" freezing Cisco routers?
    ... You didn't mention what version of IOS, nor what type of router. ... [Full-disclosure] "debug k" freezing Cisco routers? ...
    (Full-Disclosure)
  • no audio on voicemail number
    ... I have a problem with my ip phone connection in that I can't get any ... If I dial 50000 from the sipgate phone the display shows ... a different phone I hear audio so the problem has to be with my router. ... need to run a debug on this but my question is: ...
    (comp.dcom.sys.cisco)
  • Re: Backup Async going up and down.
    ... logging buffers (say, logging buffered 500000 debug). ... Your configs on on the router will also be relevant. ... then why not configure your backup links always to ... ~ connection dropping many times during its "connection" period. ...
    (comp.dcom.sys.cisco)
  • Re: Help -- Have I been rooted?
    ... I only allowed ssh, httpd, and ftp port forwarding to my ... machine for the past few days while I used a store bought router. ... I checked the router logs and was greeted by pages of stuff like this: ...
    (comp.os.linux.security)