Re: Default password in Bay Networks switches.

[jkb () BEST COM (Jan B. Koum)]

On Fri, Mar 12, 1999 at 03:28:58PM -0500, Greg Galloway <ggallowa () ISS NET> wrote:
> What username is associated with this password "NetICs"?
>
> Greg Galloway
> Software Engineer
> gregg () iss net
>
> Internet Security Systems, Inc.
> 678/443-6161
> http://www.iss.net
>
> Adaptive Network Security for the Enterprise
> =====================================
> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQ () netspace org] On Behalf Of Dax Kelson
> Sent: Wednesday, March 10, 1999 7:06 PM
> To: BUGTRAQ () netspace org
> Subject: Re: Default password in Bay Networks switches.
>
>
> On Wed, 10 Mar 1999, Jan B. Koum wrote:
>
> >     Ok.. so you would think after 3Com $%#& up last year of inserting
> >     default password into firmware vendors would learn their lesson?
> >     [See http://geek-girl.com/bugtraq/1998_2/0340.html for 3com rant]
> >
> >     Hah! Welcome to the world of strings and Bay Networks firmware
> >     files. I have looked at some bay networks switches and see that
> >     the following have default password of "NetICs"
>
> The Bay Networks case number for this bug/oversight is: 990310-614
>
> Normally "backdoor" passwords on Bay gear only work through the console.
>
> Dax Kelson
> Internet Connect, Inc.

        None.

        This switch does password authentication only.

-- Yan