2002017

	SNMP passwd
advICE :Intrusions : 2002017

FAQ

Oh my gosh, I'm being HACKED!!!

How do I report the hacker to my ISP?

I'm seeing lots of attacks, is this normal?

Summary
Remote query for passwords via the SNMP sevice.
Details
Several systems have vulnerabilities that expose clear-text passwords to the world via the SNMP service. By "walking" a MIB, a remote intruder can scan the system for passwords.
Trigger
This alert triggers when a well-known OBJECT IDENTIFIER for a password was requested.

more information

advICE: SNMP: This is the section for more information on SNMP.
BugtraqID: 1885 Cisco CVCO/4k Remote Username and Password Retrieval Vulnerability

parametric information

op SNMP operation (SET, GET, etc.)

community SNMP community

 
Version appeared: 2.5

SNMP passwd