Security Hole In SNMP

wiredog writes: "From ZDNET comes the news that there is apparently a serious security flaw in the Simple Network Management Protocol, used to control routers and other network devices." An anonymous reader points to the CERT advisory as well.

Comments

Re:Why am I not allowed to metamoderate.. (OT)

[quan74]

Check your Karma... If it is below 1 you cannot metamoderate till you post something that gets modded up....

Really? hmmm:
Have you Meta Moderated Today?
This page was generated by a Flock of Random Ninjas for quan74 (451034).

From my user info page:

Karma 0 (mostly the sum of moderation done to users comments)

Next time think before you type.
Thank you.

Re:Not a SNMP hole

[saider]

This means the one hack(crack) will effect net-snmp but not MS's crappy agent and vice-versa.

Tee-hee. A little of the slashdot trademark smack-MS-at-every-opportunity-even-when-it-isn't-r elevant comes through. The poster could have made his point without it, but instead chose to insert the "crappy" modifier before MS.

I don't know much about the various implementations and Microsoft's implementation may very well leave much to be desired. But cheap shots are still cheap shots.

If this post is not moderated -1:Offtopic, then Slashdot's crappy moderation system must be at fault.

We're getting hit hard

[Phibz]

I don't know how many of you are seeing this but in the last 5 days we've had several main machines hit including our main nfs home directory server. All Solaris 8 machines. :-(

We've noticed that all are from a group called "NSDAP" something like the Nazi propaganda arm of the Third Reich.

The files we've found left behind (hacker droppings) are /usr/lib/vold/nsdap which contains bunches about the group. /usr/bin/ls and all the other likely canidates, ps, find, su, ssh, sh, etc. are replaced. They ran a shell on port 77.
All logs and sniffer dumps etc. were emailed to angelz1578@usa.net

Rather juvenile in my opinion. Oh well its always something.

Trey