Re[2]: [sans@sans.org: SANS FLASH ALERT: Widespread SNMP Vul

2002-02-14 Thread dgoulet
Joan, The Oracle intelligent agent which uses dbsnmp is not the problem here. The real problem is the snmp agent that is running on the computer and owned by root. Therefore your SA needs to do something, not you. Dick Goulet Reply Separator

Re[2]: [sans@sans.org: SANS FLASH ALERT: Widespread SNMP Vul

2002-02-14 Thread dgoulet
Ray, No, but I do have a SA who believes that to be true. I'll try to explain it as he did. The DBSNMP agent registers a MIB with the snmp agent. It is the snmp agent that has the interface to the world. As he put it, it's not the back end that has the problem, but the front end

Re: Re[2]: [sans@sans.org: SANS FLASH ALERT: Widespread SNMP Vul

2002-02-14 Thread Peter . McLarty
As I have done a bit of networking and set up stuff to monitor equipment with SNMP I will confirm that SNMP uses a port that the snmpd or equivalent listens to and then passes the request to the appropriate process depending on what is registered with the snmpd. This is usually done on unix