Title: Cisco LEAP Hacking tool and Cisco AP Vulnerability

Thanks for the heads-up.  I was not aware of this.  However, it appears that this is a dictionary attack only, and a strong password will keep this attack from being effective.

 

Eric Barnett, CCNA

Wireless Administrator

Information and Technology Services

Arkansas State University

870-972-3033

 

 


From: Mukhar, Nasri Elias [mailto:[EMAIL PROTECTED]
Sent: Monday, April 12, 2004 9:54 AM
To: [EMAIL PROTECTED]
Subject: [WIRELESS-LAN] Cisco LEAP Hacking tool and Cisco AP Vulnerability

 

 

Not sure if you already know this or not… but this is interesting.

Expert releases Cisco wireless hacking tool

>http://www.infoworld.com/article/04/04/08/HNciscohacking_1.html

> 

>One day after it disclosed a security vulnerability in a wireless

>networking product, Cisco Systems must contend with a new threat - the

>long-promised release of a hacking tool that targets wireless networks

>running its LEAP wireless authentication protocol.

> 

>The tool, called "Asleap," allows users to scan the wireless network

>broadcast spectrum for networks using LEAP (Lightweight Extensible

>Authentication Protocol), capture wireless network traffic and crack

>user passwords, according to a message posted to the Bugtraq online

>security discussion group on Wednesday.

> 

>Bugtraq: Weaknesses in LEAP Challenge/Response

>http://seclists.org/lists/bugtraq/2003/Oct/0075.html

> 

>Tool to Crack Cisco LEAP Released

>http://wifinetnews.com/archives/003202.html

AP Vulnerability:

Networking giant's bug could put hackers in the driver's seat

http://www.cnn.com/2004/TECH/biztech/04/09/cisco.security.ap/index.html

 

Nasri E. Mukhar

University of Miami

Information Technology

Department of Telecommunications

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/cg/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/cg/.

Reply via email to