News for hackers. Stuff that matters.

A comment on Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability. Parent comment

Re:Cisco Adaptive Security Appliance SNMP Remote Code Execut... by wepple on Wednesday August 17, 2016 @05:41PM (#12308712)
my understanding was that at least one of the attacks from a while back only gave the oracle due to different actual error descriptions in the response, whereas had there been custom error pages defined for all errors, there was no oracle to use.

I could very easily be wrong though.

[ Parent | on HN ]
Re:Cisco Adaptive Security Appliance SNMP Remote Code Execut... by tptacek on Wednesday August 17, 2016 @05:43PM (#12308723)
Nope. It's any behavior change in response to bad ciphertexts, which changes are easily inferred. For instance: Lucky 13 is a padding oracle that uses only very fine-grained timing information to discern errors.
[ Parent | on HN ]