[10103] in bugtraq
Re: Xylan OmniSwitch "features"
daemon@ATHENA.MIT.EDU (Jeff Murphy)
Tue Apr 6 14:27:19 1999
Date: Mon, 5 Apr 1999 13:17:49 -0400
Reply-To: Jeff Murphy <jcmurphy@SMURFLAND.CIT.BUFFALO.EDU>
From: Jeff Murphy <jcmurphy@SMURFLAND.CIT.BUFFALO.EDU>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Jeff Murphy's message of "Thu, 1 Apr 1999 14:31:00 -0500"
Jeff Murphy <jcmurphy@SMURFLAND.CIT.BUFFALO.EDU> writes:
> we tried this with Version 3.2.5.17 and we're able to get in.
^^^^
i meant to type "weren't" but left out a couple letters.
i.e. we can not get in using your instructions.
>
> -- inserted text --
>
> > Number one: anyone can telnet to the switch and login, without knowing
> > either user or passwod strings. No permission will be given to perform
>
> If I understand this, I can hit CR and get in. Just hitting CR keeps
> returning the login prompt, using any other character gets me to password,
> but CR returns login failure.
>
> > Number two: anyone can ftp to the switch, whitout knowing either user or
> > password strings.
>
> Nope, couldn't get in.
>
> -- end inserted text --
