Some REALLY serious ramifications of the SNMP deal ?

[Chuck Lewis <clewis@xxxxxxxxxx>]

--
[ Picked text/plain from multipart/alternative ]
Hi Folks,

Far be it for me to say this is trouble, but I was reading something
yesterday that really caught my eye on this SNMP mess. In an article at
http://www.nwfusion.com/news/2002/0218snmp.html it goes into some pretty
good detail on the history of SNMP and one section where it is
discussing the SNMPv1 standard, it notes that "The ASN.1 coding in that
implementation of SNMP has a lot of stuff that no one has examined for
10 years (Marty Roesch, president of Source Fire)" and they
(NetworkWorld) go on to say "so there potentially could be
vulnerabilities uncovered in telecom systems, aircraft and even Secure
Sockets Layer, which uses ASN.1. "

SSL is at risk ? ! I know this is apparently only an issue with SNMPv1
and not SNMPv2 or v3, but SNMPv1 is MUCH more widely used.

This a true concern ?

Chuck
--