Snort mailing list archives
Re: dhcp assigned address and no ip on snort interface
From: Jason Haar <Jason.Haar () trimble co nz>
Date: Fri, 22 Feb 2002 14:33:46 +1300
On Thu, Feb 21, 2002 at 05:57:18PM -0600, pbsarnac () ThoughtWorks com wrote:
aware of the risks when using this solution. According to http://www.cisco.com/warp/public/707/cisco-malformed-snmp-msgs-pub.shtml the pix is only vulnerable from the host specified in your snmp-server host config line, which should greatly reduce your risk, but if you should definitely plan on upgrading to a patched version at some point.
"Bzzzzzzzzt!" I'm a frayed knot. :-) Don't forget, SNMP uses UDP. Therefore the entire exploit can be spoofed... [ignore the fact that the hacker has to successfully guess your snmp management stations IP address of course...] -- Cheers Jason Haar Information Security Manager Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- dhcp assigned address and no ip on snort interface Madhav Diwan (Feb 20)
- Re: dhcp assigned address and no ip on snort interface John Sage (Feb 21)
- Re: OT: Correct Drinkage Calculation... Erek Adams (Feb 21)
- <Possible follow-ups>
- RE: dhcp assigned address and no ip on snort interface Jason Brvenik (Feb 20)
- RE: dhcp assigned address and no ip on snort interface Madhav Diwan (Feb 21)
- RE: dhcp assigned address and no ip on snort interface pbsarnac (Feb 21)
- Re: dhcp assigned address and no ip on snort interface Jason Haar (Feb 21)
- Re: dhcp assigned address and no ip on snort interface Jason Brvenik (Feb 22)
- Re: dhcp assigned address and no ip on snort interface pbsarnac (Feb 21)
- Re: dhcp assigned address and no ip on snort interface John Sage (Feb 21)