SNMP security bug "ILMI string - Cisco's advisory

From: Jay Hennigan (jay@xxxxxxxx)
Date: Tue Feb 27 2001 - 20:48:17 GMT-3

• Next message: Johnny Dedon: "Dialer watch timers"
• Previous message: Wade Edwards: "RE: Trying simple LAB multicasting"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
Summary:

Affects 11.x and 12.x on releases capable of supporting ATM regardless of
whether hardware supports ATM or has an ATM interface. Allows viewing and
modification of some ATM parameters as well as informational strings such
as SysName, etc.

Can be fixed by exposing and then disabling the hidden community string
if ATM is not used, or with access lists. Patched IOS is available.

Please see:

http://www.cisco.com/warp/public/707/ios-snmp-ilmi-vuln-pub.shtml

for the gory details.

--
Jay Hennigan  -  Network Administration  -  jay@west.net
NetLojix Communications, Inc.  NASDAQ: NETX  -  http://www.netlojix.com/
WestNet:  Connecting you to the planet.  805 884-6323

• Next message: Johnny Dedon: "Dialer watch timers"
• Previous message: Wade Edwards: "RE: Trying simple LAB multicasting"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:08 GMT-3