[plug] Determining ip address
James Devenish
devenish at guild.uwa.edu.au
Wed Dec 17 17:23:50 WST 2003
In message <20031217091310.GE3173 at erdos.home>
on Wed, Dec 17, 2003 at 05:13:10PM +0800, Cameron Patrick wrote:
> I have no idea what most of the fields it dumped at me meant, but the
> disturbing bit is that it seems as though the password it uses to log
> in to the ISP is stored in cleartext and can be retrieved via SNMP
> with no autentication whatsoever. Ack!
- It probably just supports the 'public' community string meaning "all
read access" :)
- Hopefully, SNMP access is only available to "your side," the private
network side :)
- It is in one way not surprising, because the use of SNMP and useful
community strings is typically done in a "secure" network environment
(what's a community string, anyway...).
- Something else, which I forgot.
More information about the plug
mailing list