CertCities.com -- The Ultimate Site for Certified IT Professionals
Register today for a Free Sponsored Tech Library Webcast and you could WIN! Share share | bookmark | e-mail
  Microsoft®
  Cisco®
  Security
  Oracle®
  A+/Network+"
  Linux/Unix
  More Certs
  Newsletters
  Salary Surveys
  Forums
  News
  Exam Reviews
  Tips
  Columns
  Features
  PopQuiz
  RSS Feeds
  Press Releases
  Contributors
  About Us
  Search
 

Advanced Search
  Free Newsletter
  Sign-up for the #1 Weekly IT
Certification News
and Advice.
Subscribe to CertCities.com Free Weekly E-mail Newsletter
CertCities.com

See What's New on
Redmondmag.com!

Cover Story: IE8: Behind the 8 Ball

Tech-Ed: Let's (Third) Party!

A Secure Leap into the Cloud

Windows Mobile's New Moves

SQL Speed Secrets


CertCities.com
Let us know what you
think! E-mail us at:



 
 
...Home ... Editorial ... News ..News Story Tuesday: December 28, 2010


Cisco Warns of SNMP Vulnerability


6/13/2008 -- Researchers have found a pair of vulnerabilities in version 3 of the Simple Network Management Protocol (SNMPv3) that could allow attackers to gather system data or even change network equipment configurations, according to an advisory issued by Cisco Systems earlier this week.

SNMP is a standardized protocol used for remotely monitoring and managing network devices. This security can be exploited by sending malformed SNMPv3 messages. Machines running SNMPv3 will accept incomplete authentication packets, allowing a malicious user with a valid username for that machine to guess at authentication code.

Multiple Cisco products are vulnerable to this exploitation, though SNMP is disabled by default in Cisco gear. Equipment running the Cisco IOS, CatOS and the IOS-XR operating systems may be vulnerable. Administrations should log in to such equipment to find out which version of SNMP the equipment runs. Only version 3 of SNMP is affected.

Cisco's advisory offers links to patches and describes how administrators can change their equipment's setting to guard against exploitation.

In addition to certain Cisco products, network equipment by other vendors using SNMPv3 may also affected, including gear sold by 3Com, Apple Computer, Avaya, CA, EMC, Hewlett-Packard, Juniper Networks, McAfee, Network Appliance, Red Hat, Sun Microsystems and others, according to the United States Computer Emergency Response Team (US-CERT).

This vulnerability has been assigned Vulnerability Note VU#878044 by US-CERT and identifier CVE-2008-0960 in the Common Vulnerabilities and Exposures (CVE) database. --Joab Jackson



Current CertCities.com user Comments for “Cisco Warns of SNMP Vulnerability

There are no comments yet. Post one now.

Your comment about: “Cisco Warns of SNMP Vulnerability”
Name: (optional)
Location: (optional)
E-mail Address: (optional)
Comment:
   

-- advertisement (story continued below) --

top