[9909] in bugtraq
Re: Default password in Bay Networks switches.
daemon@ATHENA.MIT.EDU (Greg Galloway)
Fri Mar 12 20:21:47 1999
Date: Fri, 12 Mar 1999 15:28:58 -0500
Reply-To: Greg Galloway <ggallowa@ISS.NET>
From: Greg Galloway <ggallowa@ISS.NET>
To: BUGTRAQ@NETSPACE.ORG
What username is associated with this password "NetICs"?
Greg Galloway
Software Engineer
gregg@iss.net
Internet Security Systems, Inc.
678/443-6161
http://www.iss.net
Adaptive Network Security for the Enterprise
=====================================
-----Original Message-----
From: Bugtraq List [mailto:BUGTRAQ@netspace.org] On Behalf Of Dax Kelson
Sent: Wednesday, March 10, 1999 7:06 PM
To: BUGTRAQ@netspace.org
Subject: Re: Default password in Bay Networks switches.
On Wed, 10 Mar 1999, Jan B. Koum wrote:
> Ok.. so you would think after 3Com $%#& up last year of inserting
> default password into firmware vendors would learn their lesson?
> [See http://geek-girl.com/bugtraq/1998_2/0340.html for 3com rant]
>
> Hah! Welcome to the world of strings and Bay Networks firmware
> files. I have looked at some bay networks switches and see that
> the following have default password of "NetICs"
The Bay Networks case number for this bug/oversight is: 990310-614
Normally "backdoor" passwords on Bay gear only work through the console.
Dax Kelson
Internet Connect, Inc.