S-376: Cisco uBR10012 Series Devices SNMP Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-376: Cisco uBR10012 Series Devices SNMP Vulnerability
# 1  
Old 09-25-2008
S-376: Cisco uBR10012 Series Devices SNMP Vulnerability

Cisco uBR10012 series devices automatically enable Simple Network Management Protocol (SNMP) read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. The risk is HIGH. Successful exploitation of the vulnerability may allow an attacker to gain complete control of the device.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Linux

Syslog Server for Cisco Devices

Hi, My name is SAMKZ and I'm a dummy with Linux and I'm so sad about that. I need to have a Syslog Server to archive Logs from my Cisco Routers and Switches. I'd like to know to most robust way of doing this. I've installed Centos 5.9 and Trixbox both on VMWares. I've read... (1 Reply)
Discussion started by: SAMKZ
1 Replies

2. Infrastructure Monitoring

Nagios 3.3.1 SNMP with Cisco Switch Fails

Hello all! I am running Nagios 3.3.1 and I am trying to get it to monitor the ports on my Cisco Catalyst 3524-XL-PWR Managed Switch. But I keep getting "(Return code of 127 is out of bounds - plugin may be missing)" I have installed and compiled the plugins and the snmp services on the Ubuntu... (0 Replies)
Discussion started by: RossIV
0 Replies

3. Shell Programming and Scripting

perl Net::SNMP version getting info from cisco switch

I am having trouble working with SNMP module with perl. I am trying to get SNMP version of target system. I use following code to get it however it resturns error as "Argument "v6.0.1" isn't numeric in numeric lt (<) at ./chk_env_upd.pl line 447." Get load table my $resultat =... (1 Reply)
Discussion started by: dynamax
1 Replies

4. Infrastructure Monitoring

keep track of devices using snmp

hello all, i want to keep track of all my devices using snmp, check for intrusion. any ideas? T (0 Replies)
Discussion started by: lemseffert
0 Replies

5. OS X (Apple)

Terminal scripting to automate login to cisco devices. Help Please !

Hello, I am new to the mac world, and would like to automate my login to cisco devices (routers, switches etc...), i am in a need of writing a script that i may just click on an icon on the desktop and it will open terminal and run a few command. as follow: telnet to an ip address type... (2 Replies)
Discussion started by: drdread
2 Replies

6. UNIX for Dummies Questions & Answers

Connecting to cisco devices via console

I use configure cisco devices daily using hyper terminal in windows via the serial port. Is there an alternative solution in unix that I can connect to a cisco console port via serial port? What application do I need?? (1 Reply)
Discussion started by: dgroove3
1 Replies

7. Cybersecurity

SNMP Vulnerability

SNMP Vulnerability: In a few minutes wire services and other news sources will begin breaking a story about widespread vulnerabilities in SNMP (Simple Network Management Protocol). Exploits of the vulnerability cause systems to fail or to be taken over. The vulnerability can be found in... (1 Reply)
Discussion started by: dpatel
1 Replies
Login or Register to Ask a Question
Info::Layer2(3pm)					User Contributed Perl Documentation					 Info::Layer2(3pm)

NAME
SNMP::Info::Layer2 - SNMP Interface to network devices serving Layer2 only. AUTHOR
Max Baker SYNOPSIS
# Let SNMP::Info determine the correct subclass for you. my $l2 = new SNMP::Info( AutoSpecify => 1, Debug => 1, DestHost => 'myswitch', Community => 'public', Version => 2 ) or die "Can't connect to DestHost. "; my $class = $l2->class(); print "SNMP::Info determined this device to fall under subclass : $class "; # Let's get some basic Port information my $interfaces = $l2->interfaces(); my $i_up = $l2->i_up(); my $i_speed = $l2->i_speed(); foreach my $iid (keys %$interfaces) { my $port = $interfaces->{$iid}; my $up = $i_up->{$iid}; my $speed = $i_speed->{$iid} print "Port $port is $up. Port runs at $speed. "; } DESCRIPTION
This class is usually used as a superclass for more specific device classes listed under SNMP::Info::Layer2::* Please read all docs under SNMP::Info first. Provides abstraction to the configuration information obtainable from a Layer2 device through SNMP. Information is stored in a number of MIBs. For speed or debugging purposes you can call the subclass directly, but not after determining a more specific class using the method above. my $l2 = new SNMP::Info::Layer2(...); Inherited Classes SNMP::Info SNMP::Info::Bridge SNMP::Info::Entity Required MIBs Inherited Classes MIBs required by the inherited classes listed above. MIBs can be found in netdisco-mibs package. GLOBALS
These are methods that return scalar value from SNMP Overrides $l2->model() Cross references $l2->id() with product IDs in the Cisco MIBs. For HP devices, removes 'hpswitch' from the name For Cisco devices, removes c<'sysid'> from the name $l2->vendor() Tries to discover the vendor from $l2->model() and $l2->description() $l2->serial() Returns serial number if available through SNMP Globals imported from SNMP::Info See documentation in "GLOBALS" in SNMP::Info for details. Globals imported from SNMP::Info::Bridge See documentation in "GLOBALS" in SNMP::Info::Bridge for details. Globals imported from SNMP::Info::Entity See documentation in "GLOBALS" in SNMP::Info::Entity for details. TABLE METHODS
These are methods that return tables of information in the form of a reference to a hash. Overrides $l2->interfaces() Creates a map between the interface identifier (iid) and the physical port name. Defaults to "ifDescr" but checks and overrides with "ifName" $l2->i_ignore() Returns reference to hash. Increments value of IID if port is to be ignored. Ignores ports with "ifType" of loopback, propvirtual, other, and cpu Table Methods imported from SNMP::Info See documentation in "TABLE METHODS" in SNMP::Info for details. Table Methods imported from SNMP::Info::Bridge See documentation in "TABLE METHODS" in SNMP::Info::Bridge for details. Table Methods imported from SNMP::Info::Entity See documentation in "TABLE METHODS" in SNMP::Info::Entity for details. perl v5.12.4 2011-09-28 Info::Layer2(3pm)