Software bugs in SNMP could bring entire net down

CERT says : " Software bugs in SNMP could bring entire Net down.."
Basic network flaw threatens Net's users
02-12-2002 1:15:31 PM CST - by Robert Lemos Staff Writer, CNET News.com

Software bugs in a fundamental language of the Internet could leave routers, switches and even PCs open to attack, an Internet security watchdog said Tuesday. The problems affect the Simple Network Management Protocol, or SNMP, a basic language used to talk to routers, switches, printers and other managed network devices to allow network engineers to glean status and performance information.

Products from more than 200 makers of Internet-connected hardware are affected by the flaw, said Martin Lindner, team leader for incident handling at the Computer Emergency Response Team (CERT) Coordination Center, a major Internet security watchdog. "It is a very prevalent protocol," Lindner said. 'It's used everywhere." The software vulnerabilities could be exploited to varying effect, Lindner added. In some cases, PCs, routers and other devices could be shut down or cut off from the Internet. "In the extreme case, you could exploit a buffer overflow to take control of the device," Lindner said.....continued.....

http://www.securitynewsportal.com/cgi-bin/cgi-script/csNews/csNews.cgi?database=JanF%2edb&command=viewone&id=54&op=t

 

Re: Software bugs in SNMP could bring entire net d

Update


http://news.com.com/2100-1001-835602.html?legacy=cnet&tag=pt.msnbc.feed..ne_8785111


Basic network flaw could disrupt Net


By Robert Lemos
Staff Writer, CNET News.com
February 12, 2002, 11:40 AM PT


update Software flaws in a fundamental language of the Internet could leave the Net's basic infrastructure in danger of disruption if the holes are left unpatched, an Internet security watchdog warned on Tuesday.
As previously reported, routers, PCs and other devices could be shut down or cut off from the Internet in some cases, said Martin Lindner, team leader for incident handling at the Computer Emergency Response Team (CERT) Coordination Center. CERT is a major clearinghouse for security-related information on the Internet, located at Carnegie Mellon University.....