Re: snmp problems still alive...

From: Matthew R. Potter (mpotterat_private)
Date: Thu Feb 17 2000 - 14:57:27 PST

Next message: Aleph One: "Security Bulletins Digest"

Previous message: Alec Muffett: "ANN: Bruce 1.0ea2: Networked Host-Vulnerability Scanner for"
Maybe in reply to: Michal Zalewski: "snmp problems still alive..."
Next in thread: Damir Rajnovic: "Re: snmp problems still alive..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>
>Solaris 2.6 was the first version (I believe) to install an SNMP agent as
>part of a standard Solaris install.  There were hard-coded SNMP community
>names that gave write access.  There was also a patch. Check out:
>http://www.securityfocus.com/vdb/bottom.html?vid=177

"Fixed" in 2.7(i386,sparc)... The community is still public, but it's READ
ONLY now...
If there are thousands of  boxes on the net with sunrpc open there must be
a ton of 2.6 machines out there that could be rebooted, shutdown, stop and
start programs ( hup named with new records ;) )....
Matthew R. Potter
703-642-7350

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com>
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=FF6u
-----END PGP PUBLIC KEY BLOCK-----

Next message: Aleph One: "Security Bulletins Digest"
Previous message: Alec Muffett: "ANN: Bruce 1.0ea2: Networked Host-Vulnerability Scanner for"
Maybe in reply to: Michal Zalewski: "snmp problems still alive..."
Next in thread: Damir Rajnovic: "Re: snmp problems still alive..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:35:46 PDT