Guest

Preview Tool

Cisco Bug: CSCsy95898 - Need to remove %RCMD-4-xxxATTEMPTED messages for both rsh and rcp

Last Modified

Nov 11, 2015

Products (1)

  • Cisco IOS

Known Affected Releases

12.4(24)T

Description (partial)

Symptom:
On devices configured for RCP or RSH (but not for both), the following behavior 
can be observed:

1) if the device is configured to accept rcp connections, but not to accept
rsh connections, an attempt to execute an rsh command on port 514/tcp (cmd) or
on port 544/tcp (krcmd) will result in the following message being generated:

%RCMD-4-RSHATTEMPT: Remote shell from <user> at <address> denied

being <user> the supplied user name on the received rsh request, and <address>
the IP address of the source of the request.

2) if the device is configured to accept rsh connections, but not to accept
rcp connections, an attempt to execute an rcp command on port 514/tcp (cmd)
or on port 544/tcp (krcmd) will result in the following message being generated:

%RCMD-4-RCPATTEMPT: Remote copy from <user> at <address> denied

being <user> the supplied user name on the received rcp request, and <address>
the IP address of the source of the request.

Conditions:
The previous symptoms have been observed on Cisco IOS devices that are
configured for one of the previously referenced features, but not both - either 
rcp enabled and rsh disabled, or rsh enabled and rcp disabled.

If both features are enabled, no messages will be generated.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.