Re: SNMP Security flaw

[Chuck Lewis <clewis@xxxxxxxxxx>]

Neil,

Not real up on this stuff but forwarded the CERT warning to IGNITE this morning
and meant to send it here but spaced it.

How big a deal is this ?

Chuck

Neil Palmer wrote:

> In light of the fact someone was just asking about setting up SNMP on
> their 400:
>
> LEAD STORY
>
> SNMP FLAW IS SERIOUS, FIX ISN'T EASY | News: searchSecurity
> CERT is warning users of a vulnerability in the Simple Network
> Management Protocol (SNMP) that could allow an outsider to gain
> control of their systems. More than 200 popular products are built on
> the protocol. An Internet Security Systems expert said that users
> should consider upgrading to Version 3 of the protocol, though he
> warns that won't be easy.
>
> >> Read the full story:
> http://www.searchsecurity.com/originalContent/0,289142,sid14_gci802127,00.html
>
> from SearchSecurity newsletter:
>
> ::::::::::::::::::::  ABOUT THIS NEWSLETTER   :::::::::::::::::::::
>
> Created by TechTarget (http://www.techtarget.com)
>  TechTarget - The Most Targeted IT Media
>  Copyright 2002, All Rights Reserved.
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.