Saint EPICBANANA, Forbidden Fruit of Firewalls

Patron of Cisco ASA firewalls, ridiculous codenames, and wrong commands that do the right thing.

Life

On 13 August 2016 the Shadow Brokers group auctioned and partly published the tools of the Equation Group, attributed to the NSA. Among them was EPICBANANA: by typing invalid commands into the console of a Cisco ASA, someone who already had SSH or Telnet access could raise their privileges. Cisco had quietly fixed it in 2011, but the name, worthy of a tropical fruit, made it immortal.

Prayer

O Saint EPICBANANA, who ripens in the firewall console, let our wrong commands return nothing but an error message. Amen.

How to celebrate

Celebrated by running an ASA release later than 8.4(1) and offering a banana to the sysadmin on call.

Slip on the banana and land straight in enable mode.