[9920] in bugtraq
Re: Default password in Bay Networks switches.
daemon@ATHENA.MIT.EDU (Jan B. Koum)
Sat Mar 13 02:59:51 1999
Date: Fri, 12 Mar 1999 18:04:04 -0800
Reply-To: "Jan B. Koum" <jkb@BEST.COM>
From: "Jan B. Koum" <jkb@BEST.COM>
X-To: Greg Galloway <ggallowa@ISS.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <000f01be6cc6$f5854970$990215d0@mushu.iss.net>; from Greg
Galloway on Fri, Mar 12, 1999 at 03:28:58PM -0500
On Fri, Mar 12, 1999 at 03:28:58PM -0500, Greg Galloway <ggallowa@ISS.NET> wrote:
> What username is associated with this password "NetICs"?
>
> Greg Galloway
> Software Engineer
> gregg@iss.net
>
> Internet Security Systems, Inc.
> 678/443-6161
> http://www.iss.net
>
> Adaptive Network Security for the Enterprise
> =====================================
> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQ@netspace.org] On Behalf Of Dax Kelson
> Sent: Wednesday, March 10, 1999 7:06 PM
> To: BUGTRAQ@netspace.org
> Subject: Re: Default password in Bay Networks switches.
>
>
> On Wed, 10 Mar 1999, Jan B. Koum wrote:
>
> > Ok.. so you would think after 3Com $%#& up last year of inserting
> > default password into firmware vendors would learn their lesson?
> > [See http://geek-girl.com/bugtraq/1998_2/0340.html for 3com rant]
> >
> > Hah! Welcome to the world of strings and Bay Networks firmware
> > files. I have looked at some bay networks switches and see that
> > the following have default password of "NetICs"
>
> The Bay Networks case number for this bug/oversight is: 990310-614
>
> Normally "backdoor" passwords on Bay gear only work through the console.
>
> Dax Kelson
> Internet Connect, Inc.
None.
This switch does password authentication only.
-- Yan
