Re: Bay Networks Security Hole

BERIETF.BG.AC.YU

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Marco S Hyman: "Re: Samba problems"
• Previous message: Peter van Dijk: "Re: easy DoS in most RPC apps"
• Maybe in reply to: Marty Rigaletto: "Bay Networks Security Hole"
• Next in thread: Kirby Dolak: "Re: Bay Networks Security Hole"

>> > vendor: bay networks
>> > product: bay access node/wellfleet routers

Our local BayNetworks representative - COMNET (http://www.comnet.co.yu/)
forwarded to me the following recommendations:

* FTP Daemon on the router is not enabled by default - it's good to
  leave that untouched.

* If the User level has to be made publically available, don't install
  snmp.bat on the flash image, or at least don't make it available to
  the User account. This would disallow command "show snmp" at all.

* Restrict TELNET access and especially TFTP access to the router to
  certain sites on the network only, by applying appropriate filters!

Best regards,
Beri

.-------.
| --+-- |  Berislav Todorovic, B.Sc.E.E.     | E-mail: BERIetf.bg.ac.yu
|  /|\     Hostmaster of the YU TLD          |
|-(-+-)-|  School of Electrical Engineering  | Phone:  (+381-11) 3221-419
|  \|/     Bulevar Revolucije 73             |                   3370-106
| --+-- |  11000 Belgrade SERBIA, YUGOSLAVIA | Fax:    (+381-11) 3248-681
`-------' --------------------------------------------------------------------

• Next message: Marco S Hyman: "Re: Samba problems"
• Previous message: Peter van Dijk: "Re: easy DoS in most RPC apps"
• Maybe in reply to: Marty Rigaletto: "Bay Networks Security Hole"
• Next in thread: Kirby Dolak: "Re: Bay Networks Security Hole"