Re: Trojan attacking our switches

On Thu, 20 Mar 2003, Charles Polisher wrote:
> Search of CVE and securityfocus and googling

wrt SNMP vulnerabilities (seems relevant):

http://www.cert.org/advisories/CA-2002-03.html

> Telnetting into our HP Procurve 2524 switch

SNMP should be setn to a VLAN/management interface. Can you ACL the interface to only allow SNMP from trusted hosts? Also, I assume you only allow telnet from your management network.

-mrh

<Pre>Lose another weekend managing your IDS? Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A> Received on Fri Mar 21 16:14:26 2003