OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1998: Re: Bay Networks Security Hole

Re: Bay Networks Security Hole

Berislav Todorovic (BERIETF.BG.AC.YU)
Mon, 11 May 1998 15:37:00 +0100

>> > vendor: bay networks
>> > product: bay access node/wellfleet routers

Our local BayNetworks representative - COMNET (http://www.comnet.co.yu/)
forwarded to me the following recommendations:

* FTP Daemon on the router is not enabled by default - it's good to
  leave that untouched.

* If the User level has to be made publically available, don't install
  snmp.bat on the flash image, or at least don't make it available to
  the User account. This would disallow command "show snmp" at all.

* Restrict TELNET access and especially TFTP access to the router to
  certain sites on the network only, by applying appropriate filters!

Best regards,
Beri

.-------.
| --+-- |  Berislav Todorovic, B.Sc.E.E.     | E-mail: BERIetf.bg.ac.yu
|  /|\     Hostmaster of the YU TLD          |
|-(-+-)-|  School of Electrical Engineering  | Phone:  (+381-11) 3221-419
|  \|/     Bulevar Revolucije 73             |                   3370-106
| --+-- |  11000 Belgrade SERBIA, YUGOSLAVIA | Fax:    (+381-11) 3248-681
`-------' --------------------------------------------------------------------