OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Valdis.Kletnieksvt.edu
Date: Wed Feb 13 2002 - 11:55:13 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 13 Feb 2002 00:34:00 GMT, Eric Brandwine said:

    > What're they printing from? I'd check that first. The number of
    > win98/nt/2k hosts listening on SNMP is terrifying.

    How did it get turned on? Microsoft said in the CERT advisory:

         Summary:
         All Microsoft implementations of SNMP v1 are affected by the
         vulnerability. The SNMP v1 service is not installed or running by
         default on any version of Windows. A patch is underway to eliminate
         the vulnerability. In the meantime, we recommend that affected
         customers disable the SNMP v1 service.

    Is this like the "W2K doesn't install IIS, but if you upgraded a machine
    that had Personal Webpage (or whatever it was) it will upgrade that to IIS"? 

    -- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Exmh version 2.5 07/13/2001

    iD8DBQE8aqiBcC3lWbTT17ARAstqAJ9YZY3+huW2dluaeMWwvyLwuF6Y8gCgq/yR V9iHji+2kveepfa0XAFB8/A= =qCLw -----END PGP SIGNATURE-----