'Devices at risk' from SNMP exploits

Routers most vulnerable, says expert

Written by James Middleton

Experts have warned that the recently discovered vulnerabilities in Simple Network Management Protocol (SNMP) could be "as big a problem as Nimda".

Security watchers maintain that thousands of devices could be at risk and that we will see exploits for this vulnerability.

Advertisement

Pete Philips, security consultant for Integralis S3, the security firm's ethical hacking unit, said: "We're going to see a lot of action here. It's too easy to launch attacks this way."

Philips reckons that routers will be most at risk. "With Windows and Unix hosts, it's likely that only the service will be taken out. But routers could be rebooted, opening up the potential for a massive denial of service [DoS] attack."

He said that SNMP exploits could get onto internal networks and DoS objects running SNMP, such as printers.

"It's possible there's exploits out there already," said Philips. "I've seen SNMP probes already today, and there can only be one reason for those."

According to Philips one of the problems is that security watchers are still in the dark over the finer details.

"No-one is quite sure about how the vulnerability will be exploited, because we're not exactly sure how the vulnerability works," he said.

"There's some suggestion that the vulnerability was discovered by the University of Aula, Finland, where researchers had been doing heavy testing work on SNMP packages, but no fine details are available. But it's maybe some sort of buffer overflow or format string vulnerability."

However, Philips said it is "definitely possible" that black hat hackers know how to exploit the hole.

As a precaution, Philips recommended users should "disable SNMP where you don't need it. You shouldn't be running it over the internet anyway," he said.

Unfortunately, the default setting for SNMP is 'on'.

Tags:

Related whitepapers

Related jobs

Do you agree?

Most commented stories

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation