msn.forums.tv.special-events deletion
Za...@msn.forums.tv.special-events
aware of the security issues of Internet transmissions for network
device configuration files. Suggest wide-spread distribution of a memo
concerning the problem. Perhaps place "no-Internet-transmission" comments
in all network config files. Standard warning issued to all new networkers.
Three transmissions of live passwords to three different Salomon routers
have been sent in cleartext over the Internet by Rock Transves nnn-nnnn
of Internet Client Services:
SENDER DATE ROUTER LINE PASSWORD
Rock Transves 6/27/96 09:37 bc7f7w40 [global] bs345way
[and again on] 6/26/96 16:10 con 0 bs345way
aux 0 bs345way
vty 0 qwerty0
Rock Transves 6/18/96 11:27 ard7w35 [global] z23c4v5b
trangobw1 [global] bs345way
con 0 bs345way
ALL OF THESE ROUTERS *AND* ALL ROUTERS USING THE SAME PASSWORDS
MUST HAVE THEIR PASSWORDS CHANGED.
[snip]
*******************************************************************************
*******************************************************************************
*******************************************************************************
SECURITY INCIDENT REPORT, 7/3/96
OASYS SOURCE CODE:
38,696 PROPRIETARY LINES
--------------------------------
This is a security incident report regarding the Internet (a public wire)
traffic of Salomon Brothers, which is monitored for security/compliance.
On Jul 3 1996, sara xxxxxxxxx of XXX-NJ emailed over the unprotected
Internet 38,696 lines of OASYS C++ code to vendor RogueWave for tech support
This code was clearly marked:
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 2.4.0
L8kBjWVklo85YzPVU0fAGCCbnQKX43emFIjcM7Jl+CNubxeFuF09RmUN5T+FQcRM
7mfT21AdKYpOY7ogs+ZpWY45wXlhnPZijqIYmWGK8Mz2FL2LlWKyCYSAa07Pi8d5
T1kgQNuTv9G8z307pJo3O1/s0f0c2dQd7kFvZqiahtqdm4RLo3Fwrql3p/N54Bf5
BVkBtsO7+cP4XcjpCcvQOX1dLO/s6iIvDmpA/l4E1WZfBT==
=sQ9+
-----END PGP SIGNATURE-----