Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" - MORE PROBLEMS

["Thomas M. Payerle" <payerle@physics.umd.edu>]

On Tue, 17 Feb 2004 thiago.vazquez@light.com.br wrote:

> We have many products from APC and we've tested that vulnerability in some
> of them and ..... following are the results.
Confirmed on a Symmetra UPS with AP9606 running AOS v3.1.1, Symeetra Power
Array APP v3.1.0

As with any vendor backdoor, I would suspect that it is present on a wide
range of software versions and just about anything with an AP9606 is vulnerable.


Tom Payerle
Dept of Physics                         payerle@physics.umd.edu
University of Maryland                  (301) 405-6973
College Park, MD 20742-4111             Fax: (301) 314-9525