[10110] in bugtraq
Re: Xylan OmniSwitch "features"
daemon@ATHENA.MIT.EDU (Wall, Teresa)
Tue Apr 6 17:29:06 1999
Date: Mon, 5 Apr 1999 16:30:39 -0400
Reply-To: "Wall, Teresa" <TWall@OSC.USCG.MIL>
From: "Wall, Teresa" <TWall@OSC.USCG.MIL>
X-To: Jeff Murphy <jcmurphy@SMURFLAND.CIT.BUFFALO.EDU>
To: BUGTRAQ@NETSPACE.ORG
unable to get into Xylan OmniSwitch running 3.4.3.28
-----Original Message-----
From: Jeff Murphy [mailto:jcmurphy@SMURFLAND.CIT.BUFFALO.EDU]
Sent: Thursday, April 01, 1999 2:31 PM
To: BUGTRAQ@NETSPACE.ORG
Subject: Re: Xylan OmniSwitch "features"
we tried this with Version 3.2.5.17 and we're able to get in.
-- inserted text --
> Number one: anyone can telnet to the switch and login, without knowing
> either user or passwod strings. No permission will be given to perform
If I understand this, I can hit CR and get in. Just hitting CR keeps
returning the login prompt, using any other character gets me to password,
but CR returns login failure.
> Number two: anyone can ftp to the switch, whitout knowing either user or
> password strings.
Nope, couldn't get in.
-- end inserted text --
