[plug] Determining ip address

James Devenish devenish at guild.uwa.edu.au
Wed Dec 17 17:23:50 WST 2003


In message <20031217091310.GE3173 at erdos.home>
on Wed, Dec 17, 2003 at 05:13:10PM +0800, Cameron Patrick wrote:
> I have no idea what most of the fields it dumped at me meant, but the
> disturbing bit is that it seems as though the password it uses to log
> in to the ISP is stored in cleartext and can be retrieved via SNMP
> with no autentication whatsoever. Ack!

 - It probably just supports the 'public' community string meaning "all
   read access" :)
 - Hopefully, SNMP access is only available to "your side," the private
   network side :)
 - It is in one way not surprising, because the use of SNMP and useful
   community strings is typically done in a "secure" network environment
   (what's a community string, anyway...).
 - Something else, which I forgot.





More information about the plug mailing list