(In)Security in Network Management

No ratings

Presented at BlackHatAsia 2003 by

SNMP is the most popular protocol for network management. From high end routers, to low end wireless access points, its everywhere on the network. Yet evil lurks just beneath the surface of this "simple" protocol. With a myriad of protocol level flaws, and a mountain of implementation flaws, just how safe is the network running this protocol? This talk will discuss many of the protocol level problems in SNMP1/2c, and SNMPv3. It will also inspect some of the biggest implementation flaws out there, as well as discuss new, never before seen implementation problems (READ: SNMP zero-day). A demonstration showing just how useful SNMP and its flaws are will also be conducted. Jeremy Rauch has been involved in discovering and researching security vulnerabilities for 10 years. During this time, he also worked for a number of security vendors, building and designing security software in the scanner and IDS markets, as well as being one of the founders of SecurityFocus.com. Not isolated to only working directly in security, Jeremy spent a number of years working for a major optical networking vendor, where he was a principle engineer, designing 5 9’s uptime distributed control, upgrade and network management systems with an eye to security.