You can even write a “home-made” one in bash by wrapping around the ’snmpget’ (from the net-snmp package) command and requesting the ’system description’ OID.

SNMP security is indeed an interesting subject!

Side-note: I can’t seem find the link to the paper?

–
Yash Kadakia
CTO, Security Brigade
http://www.securitybrigade.com
Penetration Testing, PCI DSS Compliance, Security Consulting etc.

“Hardware: x86 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Uniprocessor Free)”

However, it’s still correct to say that most Windows boxes found were Windows 2000 (5.0).

Funny enough there was also a Win98 box?!! I wonder if it’s a honey pot: “Microsoft Corp. Windows 98.”

view the following article

http://isc.sans.org/diary.html?storyid=4175

Here is how your actions reflect on the computer misuse act:

1) He causes a computer to perform any function with intent to secure access to any program or data held in a computer;
- you’ve tried to compromise our systems by submitting meta characters such as “, < , > and ‘, things that can potentially lead to SQL Injection and backend compromise.

2) the access he intends to secure is unauthorized; and
- we have never gave you any sort of authorization. We never give such privilege to trolls. We have never give you authorization to post meta characters on this post or to access the GNUCITIZEN domain.

3) he knows at the time when he causes the computer to perform the function that this is the case.
- your intentions are more then clear.

:)

1(1) of computer misuse act 1990
A person is guilty of an offence if:

a) He causes a computer to perform any function with intent to secure access to any program or data held in a computer;
b) the access he intends to secure is unauthorized; and
c) he knows at the time when he causes the computer to perform the function that this is the case.

you’ve used known default passwords to access other information without authorization, thus securing vital/security related information.

this is equivalent to using default admin passwords on an insecure website, and retrieving sensitive information or performing defacement.

JD>”How do you plead”;
GNUC>”Innocent!!!!”
JD>”How did I know you’d say that, I find you Guilty under all 3″
– Judge Dredd

Please explain yourself!

”
Other ZyXEL models not mentioned in this paper might also be vulnerable to the same issues discussed. Additionally, not all ZyXEL models mentioned in this paper have been tested for the same vulnerabilities due to time constraints and lack of full unrestricted access (i.e.: full administrative access was not possible during a penetration test).
”

I recommend you reading the manual for your model in order to find out how to change the default SNMP community strings, or restrict SNMP access from trusted IP addresses only: http://www.zyxel.com/DownloadL.....T).pdf