Security Incidents mailing list archives

Re: new SNMP vuln?


From: "James" <jamesh () cybermesa com>
Date: Thu, 7 Feb 2002 14:01:17 -0700

I have seen these here; looking at the whole packet it is clear (at least in
my case) that they were looking for SNMP with
write/change permissions and an obvious community name. Like "public" or
"private" We blocked SNMP on the border routers to stop this.


James Edwards
jamesh () cybermesa com
At the Santa Fe Office: Internet at Cyber Mesa
Store hours: 9-6 Monday through Friday
Phone support 365 days till 10 pm via the Santa Fe office:
505-988-9200 or Toll Free: 888-988-2700



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: