Bugtraq mailing list archives

Re: snmp problems still alive...

From: mpotter () ATPCO COM (Matthew R. Potter)
Date: Thu, 17 Feb 2000 14:57:27 -0800


Solaris 2.6 was the first version (I believe) to install an SNMP agent as
part of a standard Solaris install.  There were hard-coded SNMP community
names that gave write access.  There was also a patch. Check out:
http://www.securityfocus.com/vdb/bottom.html?vid=177


"Fixed" in 2.7(i386,sparc)... The community is still public, but it's READ
ONLY now...
If there are thousands of  boxes on the net with sunrpc open there must be
a ton of 2.6 machines out there that could be rebooted, shutdown, stop and
start programs ( hup named with new records ;) )....
Matthew R. Potter
703-642-7350

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com>
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=FF6u
-----END PGP PUBLIC KEY BLOCK-----

Current thread:

Patch Available for "VM File Reading" Vulnerability, (continued)
- - - Patch Available for "VM File Reading" Vulnerability Microsoft Product Security (Feb 19)
    - Re: cisco/ascend snmp config tool or exploit? -- Re: snmp problems still alive Michal Zalewski (Feb 20)
    - unused bit attack alert LigerTeam (Feb 21)
    - A.L.E.R.T.: BigMailBox.com href tokens leave mailboxes open to control by a malicious site. Cancer Omega (Feb 21)
    - Re: unused bit attack alert Jochen Bauer (Feb 22)
    - Re: unused bit attack alert Carlos García Argos (Feb 22)
    - Re: unused bit attack alert CyberPsychotic (Feb 22)
- Re: snmp problems still alive... John Comeau (Feb 15)
  - Re: snmp problems still alive... Damir Rajnovic (Feb 17)
- Re: snmp problems still alive... Ryan Russell (Feb 15)
- Re: snmp problems still alive... Matthew R. Potter (Feb 17)