[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point

To: mad-vaittes@xxxxxxxxxxxxxxxx
Subject: Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
From: Simon Richter <Simon.Richter@xxxxxxxxxx>
Date: Fri, 9 Jan 2009 17:52:08 +0100

Hi,

> WG102 offers the the typical SNMP write & SNMP read community password 
> 'protection'.

SNMP communities are a safety, not a security measure. I know of very few
SNMP implementations that have protections against brute force or
dictionary attacks.

> Proposed fixes:
>  do not enable SNMP at all. vendor fix required.

This AP can use VLAN tagging to separate management traffic from user data,
which is generally a good idea in any environment.

   Simon

Follow-Ups:
- Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  - From: Steve Shockley

References:
- Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  - From: mad-vaittes

Prev by Date: ShakaCon 2009 Call for Papers and Trainers
Next by Date: Java Runtime UTF-8 Decoder Smuggling Vector
Previous by thread: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
Next by thread: Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
Index(es):
- Date
- Thread