Warning: Cisco RW community backdoor.

Tue Feb 27 06:25:34 UTC 2001

A table of IOS with the "feature" and without the "feature" will be made
public today.

Regards,

Chris Hallman
NSE NSP North Florida
3660 Maguire Blvd., Suite 200
Orlando, Fl. 32803
407-897-8744 office
407-903-7591 off-site office
800-365-4578 pager
email: mailto:challman at cisco.com

-----Original Message-----
From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of
Jason Slagle
Sent: Monday, February 26, 2001 10:02 PM
To: Sean Donelan
Cc: nanog at merit.edu
Subject: Re: Warning: Cisco RW community backdoor.

Interesting enough, I tried this on a dozen routers and not a peep out of
one.  All running new 12.0 or 12.1.

Jason

---
Jason Slagle - CCNA - CCDA
Network Administrator - Toledo Internet Access - Toledo Ohio
- raistlin at tacorp.net - jslagle at toledolink.com - WHOIS JS10172
/"\ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
\ /   ASCII Ribbon Campaign  . If dreams are like movies then memories
 X  - NO HTML/RTF in e-mail  .   are films about ghosts..
/ \ - NO Word docs in e-mail .     - Adam Duritz - Counting Crows

On 26 Feb 2001, Sean Donelan wrote:

>
> > ----- Forwarded message from "James A. T. Rice"
<jamesr at rd.bbc.co.uk> -----
> > If your router responds to `snmpwalk router.isp.net.uk ILMI`, you
> > probabally will want to do the following to disable it:
> >    conf t
> >    snmp-server community ILMI RO 99
> >    access-list 99 deny any log
> > (pick another spare access-list if 99 isn't available)
>
> should be RW not RO
>
> Anyone with a Smartnet contract have a response from Cisco yet?  I really
> need to get my own Smartnet number.
>
>
>
>
>