uk.media.tv.sf.misc deletion
Ron...@uk.media.tv.sf.misc
This was the fourth report in a row.
********** begin excerpt from 'Corruption at Salomon Brothers' **********
*******************************************************************************
*******************************************************************************
*******************************************************************************
SECURITY INCIDENT REPORT, 6/27/96
ROUTER PASSWORDS
BRIDGE AND ROUTER CONFIGURATIONS
NOC SYSTEMS SECURITY
---------------------------------
This is a security incident report regarding the Internet (a public wire)
traffic of Salomon Brothers, which is monitored for security/compliance.
NOTE: THESE INCIDENTS HAVE NOT STOPPED DESPITE REPEATED SISS REPORTS!
This report should be taken as a complaint that insufficient procedures
have been put in place to ensure current and new Salomon personnel are
made aware of the security issues of Internet transmissions for network
device configuration files. Suggest wide-spread distribution of a memo
concerning the problem. Perhaps place "no-Internet-transmission" comments
in all network config files. Standard warning issued to all new networkers.
Three transmissions of live passwords to three different Salomon routers
have been sent in cleartext over the Internet by Rock Transves nnn-nnnn
of Internet Client Services:
SENDER DATE ROUTER LINE PASSWORD
Rock Transves 6/27/96 09:37 bc7f7w40 [global] bs345way
[and again on] 6/26/96 16:10 con 0 bs345way
aux 0 bs345way
vty 0 qwerty0
Rock Transves 6/18/96 11:27 ard7w35 [global] z23c4v5b
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.1.6
S3fIvr/cIa5aDjRynU1wJaEr7jCJpWWKGtF3hic+bUoz1wRegACpCqa0Gm6pywVD
KtJqZ5z2esJozKx9hpsPO+AtA+TIukchUjb/SEFJHZC6CJRzFnbT1feFpMbP1yGS
PkVmbLB7zIL3HD91CD60acNVsyP+SPUNTyJa9V/ACsaoI1TLf+MmEuLtLSZBc6ra
VMmkpBW+F7QmJvjZrG2wy1==
=+hfc
-----END PGP SIGNATURE-----