Re: Default password in Bay Networks switches.

From: Jan B. Koum (jkbat_private)
Date: Fri Mar 12 1999 - 18:04:04 PST

Next message: aleph1at_private: "Microsoft Security Bulletin (MS99-008)"

Previous message: Andy Church: "Re: Bug in IRC services"
Maybe in reply to: Jan B. Koum: "Default password in Bay Networks switches."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Fri, Mar 12, 1999 at 03:28:58PM -0500, Greg Galloway <ggallowaat_private> wrote:
> What username is associated with this password "NetICs"?
>
> Greg Galloway
> Software Engineer
> greggat_private
>
> Internet Security Systems, Inc.
> 678/443-6161
> http://www.iss.net
>
> Adaptive Network Security for the Enterprise
> =====================================
> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQat_private] On Behalf Of Dax Kelson
> Sent: Wednesday, March 10, 1999 7:06 PM
> To: BUGTRAQat_private
> Subject: Re: Default password in Bay Networks switches.
>
>
> On Wed, 10 Mar 1999, Jan B. Koum wrote:
>
> > 	Ok.. so you would think after 3Com $%#& up last year of inserting
> > 	default password into firmware vendors would learn their lesson?
> > 	[See http://geek-girl.com/bugtraq/1998_2/0340.html for 3com rant]
> >
> > 	Hah! Welcome to the world of strings and Bay Networks firmware
> > 	files. I have looked at some bay networks switches and see that
> > 	the following have default password of "NetICs"
>
> The Bay Networks case number for this bug/oversight is: 990310-614
>
> Normally "backdoor" passwords on Bay gear only work through the console.
>
> Dax Kelson
> Internet Connect, Inc.

	None.

	This switch does password authentication only.

-- Yan

Next message: aleph1at_private: "Microsoft Security Bulletin (MS99-008)"
Previous message: Andy Church: "Re: Bug in IRC services"
Maybe in reply to: Jan B. Koum: "Default password in Bay Networks switches."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:38:58 PDT