[10096] in bugtraq
Re: Xylan OmniSwitch "features"
daemon@ATHENA.MIT.EDU (Jeff Murphy)
Mon Apr 5 14:21:44 1999
Date: Thu, 1 Apr 1999 14:31:00 -0500
Reply-To: Jeff Murphy <jcmurphy@SMURFLAND.CIT.BUFFALO.EDU>
From: Jeff Murphy <jcmurphy@SMURFLAND.CIT.BUFFALO.EDU>
X-To: pmsac@TOXYN.ORG
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: pmsac@TOXYN.ORG's message of "Wed, 31 Mar 1999 19:12:20 +0000"
we tried this with Version 3.2.5.17 and we're able to get in.
-- inserted text --
> Number one: anyone can telnet to the switch and login, without knowing
> either user or passwod strings. No permission will be given to perform
If I understand this, I can hit CR and get in. Just hitting CR keeps
returning the login prompt, using any other character gets me to password,
but CR returns login failure.
> Number two: anyone can ftp to the switch, whitout knowing either user or
> password strings.
Nope, couldn't get in.
-- end inserted text --
