An increasing number of deployed IOS images support scripting from the command line by using TCL scripts. This feature is mostly used to automate monitoring of the device or automatically act upon certain log messages encountered.
However, it has been shown8 that TCL scripts can be used for implementing more complex services, including implementation of Botnet clients or making the router participate in the Twitter service.
As the number of TCL controllable functionality in Cisco IOS increases, attackers may well find everything they need for the purpose of “regular” online crime and fraud by using customized TCL scripts for IOS.
0 comments:
Post a Comment