S-319: Cisco Intrusion Prevention System Vulnerability
Cisco Intrusion Prevention System (IPS) platforms that have gigabit network interfaces installed and are deployed in inline mode contain a denial of service vulenrability in the handling of jumbo Ethernet frames. This vulnerability may lead to a kernel panic that requires a power cycle to recover platform operaiton. The risk is MEDIUM. Successful exploitation of the vulnerability may result in a network denial of service condition. A power cycle is required to recover operations. An attacker may be able to evade access controls and detection of malicious activity int he case of Cisco IPS 4260-4270 platforms that have hardware bypass configured to pass traffic in the event of a kernel panic.
Net::CLI::Interact::Manual::Phrasebook(3pm) User Contributed Perl Documentation Net::CLI::Interact::Manual::Phrasebook(3pm)NAME
Net::CLI::Interact::Manual::Phrasebook - List of Supported CLIs
INTRODUCTION
The bundled phrasebook includes support for a variety of network device CLIs. Many were contributed by users of the module. If you set up
a new CLI dictionary, please consider contributing it back! The phrasebook specification is given in Net::CLI::Interact::Phrasebook.
For each supported CLI, there is a name which must be passed in the "personality" option to Net::CLI::Interact's "new()" method. After
that, you can call the included Macros, and the module will use the included Prompt to match the current state of the CLI. More information
is available in the Tutorial and Cookbook.
Below is a list of all current bundled CLI dictionaries. Each lists its name, the available Prompts, Macros and Continuations, and from
which other CLI dictionaries it inherits.
IOS # Cisco IOS
CatOS # for older, pre-IOS Cisco devices
PIXOS # for PIX OS-based devices
PIXOS7 # Slightly different commands from other PIXOS versions
FWSM # currently the same as 'PIXOS'
FWSM3 # for FWSM Release 3.x devices (slightly different to FWSM 2.x)
JunOS # Juniper JUNOS support
HP # HP support
Nortel # Nortel support
ExtremeOS # Extreme Networks support
Foundry # Foundry/Brocade device support
PERSONALITIES
Cisco
This personality goes by the name of "cisco" and provides a basis for many other CLI dictionaries.
Prompts are "basic", "privileged", "configure", "user", and "pass".
Macros are "begin_privileged", "end_privileged", "begin_configure", "end_configure", and "disconnect".
CatOS
This personality goes by the name of "catos" and inherits from the "cisco" dictionary.
Additionally it provides the "privileged" Prompt.
Additionally it also provides the "paging" Macro to set the terminal page size.
ExtremeOS
This personality goes by the name of "extremeos" and inherits from the "cisco" dictionary.
Additional Prompts are "basic", "privileged", "configure", "user", and "pass".
Additional Macros are "begin_privileged", "end_privileged", and "disconnect".
Foundry / Brocade
This personality goes by the name of "foundry" and inherits from the "cisco" dictionary. Before connecting to the device you probably want
to set the output separator to be:
$nci->transport->ors("
");
For users of Net::Appliance::Session this should be:
$session_obj->nci->transport->ors("
");
IOS
This personality goes by the name of "ios" and inherits from the "cisco" dictionary.
Additionally it provides the "paging" Macro to set the terminal page size.
HP
This personality goes by the name of "hp" and inherits from the "cisco" dictionary.
Additionally it provides the "basic" and "user" Prompts.
JunOS
This personality goes by the name of "junos" and inherits from the "cisco" dictionary.
Additionally it provides the "privileged", "configure", and "user" Prompts.
Additionally it also provides the "begin_configure" and "paging" Macros.
Nortel
This personality goes by the name of "nortel" and inherits from the "cisco" dictionary.
Additionally it provides the "user" Prompt.
PIXOS
This personality goes by the name of "pixos" and inherits from the "cisco" dictionary.
Additionally it provides the "paging" Macro to set the terminal page size.
It can be used in its own right for Cisco PIX firewalls, but is also used as a base for other dictionaries.
PIXOS 7
This personality goes by the name of "pixos7" and inherits from the "pixos" dictionary.
Additionally it provides the "paging" Macro to set the terminal page size.
FWSM
This personality goes by the name of "fwsm" and inherits from the "pixos" dictionary.
It provides no further functionality, as Cisco FWSM software version 1 and 2 was the same as the PIX OS.
FWSM 3
This personality goes by the name of "fwsm3" and inherits from the "pixos" dictionary.
Additionally it provides the "paging" Macro to set the terminal page size.
perl v5.14.2 2012-06-12 Net::CLI::Interact::Manual::Phrasebook(3pm)