[18450] in bugtraq

home help back first fref pref prev next nref lref last post

Hidden sniffer on unplumb'ed interface on Solaris

daemon@ATHENA.MIT.EDU (Robert Banniza)
Fri Jan 5 16:17:18 2001

Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id:  <GMEDKMKMEBENJMBLDHAIAEHECKAA.robert@rootprompt.net>
Date:         Thu, 4 Jan 2001 21:40:33 -0800
Reply-To: Robert Banniza <robert@ROOTPROMPT.NET>
From: Robert Banniza <robert@ROOTPROMPT.NET>
To: BUGTRAQ@SECURITYFOCUS.COM

After reading the following article
(http://www.enteract.com/~robt/Docs/Howto/Sun/sniffer-trick.txt) by Rob
Thomas, it was brought to my attention that a sniffer can be silently
sitting on an unplumb'ed interface on Solaris. Not only is this dangerous
for large networks, it is often hard to find. Has anyone ever contacted Sun
about this potential problem...I'm fixing to try this on Solaris 8 to
determine if the problem still exists.

Robert

home help back first fref pref prev next nref lref last post