Wednesday, January 30, 2008

PIX/ASA Finesse 7.1 & 7.2 Privilege Escalation

I was trying to get into admin mode without the enable password during a penetration test and i came across a post by Terry where he describes a designing flaw in the PIX/ASA Finesse Operation System, version 7.1 and 7.2. Well, it was possible to escalate a normal level 0 user to a level 15 privilege user. The exploit is simple and it only works locally, at the console and remotely with Telnet. However, do note that it will NOT work if SSH, TACACS or Radius is implemented in the firewall. Below are the steps.

1. Login with your user level 0 account. Once logon, you will be prompted to enter the enable password which is the privilege password.

2. At this prompt if you move your cursor forward with a space or character(it doesn't matter if there are more then one), and then proceed to delete any spaces or characters, by holding down the backspace a second after deleting the last character it should immediately drop you into level 15 privilege-exec mode.

It had been tested on PIX 515E, Finesse version 7.2 and i had also tested it on the PIX 525.

The Hacka Man

26 comments:

Wireless said...

Hello. This post is likeable, and your blog is very interesting, congratulations :-). I will add in my blogroll =). If possible gives a last there on my blog, it is about the Wireless, I hope you enjoy. The address is http://wireless-brasil.blogspot.com. A hug.

web designer, web design India said...

good post

About India said...

very informative article.
Web Design  |   Web Designer

Anonymous said...

anime cosplay follows Comic-Figures or and also your ideas and desires for cheap cosplay.Our cosplay costumes are not made in the same measurement, but are made with our cosplay special attention to your request.naruto cosplay or cosplay naruto is hot sale now. Furthermore, we will still send you the product Japanese School Uniform after our detailed further check.Yyou'll be surprised at the plentiful varieties such as Kingdom Hearts Cosplay, Bleach Cosplay, Final Fantasy Cosplayand you are sure to find the special anime cosplay costumes you've been looking for wholesale costume in our store.

Anonymous said...

graphics design outsourcing | business card design Outsourcing | certificate design outsourcing

Anonymous said...

hoarding design outsourcing | panaflex design outsourcing

the said...

Top website designing company in India, Nashik provding world class website design and solutions.
Nashik Website Designing, Nasik Webpage Design, Nashik Website Design, Nashik website company, SEO Company Nashik, Nashik Website
Development Services

kimberly said...

buy viagra
viagra online
generic viagra

katty said...

Interesting blog, i usally be aware all about all different kind of sofware. i am online all the time, and this action allowed me to see a site costa rica homes for sale and i like it too much, beyond all doubt without my computer and a great network i never would have seen this site too.

chunxue said...

During the World War II, Art Deco jewellery was ugg sale a very popular style among women. The females started ugg boots wearing short dresses and cut their hair short. And uggs such boyish style was accessorized with Art Deco jewellery. They used cheap ugg boots long dangling earrings and necklaces, multiple bracelets and bold ugg boots uk rings.Art Deco jewellery has harshly geometric and symmetrical theme instead disocunt ugg boots of free flowing curves and naturalistic motifs. Art Deco Jewelry buy ugg boots today displays designs that consist of arcs, circles, rectangles, squares, and ugg outlet triangles. Bracelets, earrings, necklaces and rings are added with long ugg boots outlet lines and curves.One example of Art Deco jewelry is the Art Deco ring. Art Deco rings have ugg mall sophisticated sparkle and bold styles. These rings are not intended for a subtle look, they are meant to be noticed. Hence, these are perfect for people with bold styles.

Simon cadbury said...

Very nice Site number one topic Thanks you..
panaflex design | Entertainment logo

Anonymous said...

Thanks for the info, was very useful. My brother who is always looking for
Viagra Online told me about this and it's great.
Generic Viagra Buy Viagra

LUCAS said...

Thanks for sharing
panaflex design | point of sale desplays design

iPad Game Development said...

Thanks for the nice information. I am sure, I will tweet this to my twitter account. This will help a lot of users. Windows Phone 7 Application Development Custom Software Development Mobile App Development iPhone Application Development iPhone Game Development

free lesbian adult stories said...

Gladys felt crushing guilt for pressuring her daughter to share hersecret. I tell her get out,and get dressed.
aunt sex stories post
young sex stories
hardcore sex stories
cross dressed in bondage stories
family nude together first time stories
Gladys felt crushing guilt for pressuring her daughter to share hersecret. I tell her get out,and get dressed.

purchase viagra said...

I am thoroughly convinced in this said post. I am currently searching for ways in which I could enhance my knowledge in this said topic you have posted here. It does help me a lot knowing that you have shared this information here freely. I love the way the people here interact and shared their opinions too. I would love to track your future posts pertaining to the said topic we are able to read.

viagra online said...

Your blog is outrageous! I mean, Ive never been so entertained by anything in my life! Your vids are perfect for this. I mean, how did you manage to find something that matches your style of writing so well? Im really happy I started reading this today. Youve got a follower in me for sure!

Infobanc said...

I have been meaning to read this and just never got a chance. Its an issue that Im very interested in, I just started reading and Im glad I did. Youre a wonderful blogger, 1 of the most effective that Ive seen. This weblog undoubtedly has some facts on topic that I just wasnt aware of. Thanks for bringing this stuff to light.

canada exporters
b2b trade leads
suppliers directory
indian trade portal
Indian buyers
Indian tenders
trade fairs
indian distributer

Ranchi Hotels said...

Thanks for that post! We are glad to find someone who puts a lot of thought into their blog instead of just throwing up a bunch of junk!

Best Hotel in Ranchi
Budget hotels in Ranchi
Cheap Hotel Rooms in Ranchi
Economy hotels in Ranchi
Luxury Hotels in Ranchi
Restaurant in Ranchi
Bar in Ranchi
Best Banquet in Ranchi

Viagra said...

Thank your for these instructions!

Effective Affiliate Management said...

Great post.

iPhone Game Development said...

Thanks for the nice information. I am sure, I will stumble this to my stumbleupon account. This will assist a lot of users.

Essay Writing Services said...

Greetings! I would just like to express my gratitude for the cool information contained in this post. I will be visiting your site for more awesome info soon. Essay Writing Services

Affordable Thesis Writing said...

Awsome article Waiting for more info dude !!

Cereb said...

Thanks for this article. It's just what I was searching for. I am always interested in this subject.
Cereb

Rajeev Gaur said...

Imgtech website design company in Delhi Affordable web Design services offering best web design and Development Services in Delhi / NCR.