clari.sports.baseball.major.al.stats

-----BEGIN PGP SIGNED MESSAGE-----

SECURITY INCIDENT REPORT, 6/27/96

ROUTER PASSWORDS
BRIDGE AND ROUTER CONFIGURATIONS
NOC SYSTEMS SECURITY
---------------------------------

This is a security incident report regarding the Internet (a public wire)
traffic of Salomon Brothers, which is monitored for security/compliance.

NOTE: THESE INCIDENTS HAVE NOT STOPPED DESPITE REPEATED SISS REPORTS!

This report should be taken as a complaint that insufficient procedures
have been put in place to ensure current and new Salomon personnel are
made aware of the security issues of Internet transmissions for network
device configuration files. Suggest wide-spread distribution of a memo
concerning the problem. Perhaps place "no-Internet-transmission" comments
in all network config files. Standard warning issued to all new networkers.

Three transmissions of live passwords to three different Salomon routers
have been sent in cleartext over the Internet by Rock Transves nnn-nnnn
of Internet Client Services:


SENDER          DATE             ROUTER     LINE       PASSWORD

Rock Transves   6/27/96 09:37    bc7f7w40   [global]   bs345way
[and again on]  6/26/96 16:10               con 0      bs345way
aux 0      bs345way
vty 0      qwerty0

Rock Transves   6/18/96 11:27    ard7w35    [global]   z23c4v5b
trangobw1  [global]   bs345way
con 0      bs345way

ALL OF THESE ROUTERS *AND* ALL ROUTERS USING THE SAME PASSWORDS
MUST HAVE THEIR PASSWORDS CHANGED.
[snip]




*****************************************************


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 2.0.4

Pd8Q2bNyWbie5B8sCTp33h+EzMteGsQLQyMJtkuGtbjZbbGZkvvDDbxkK4qyDXwX
Xy5jR4ppeshZZctoueyOD7JmuDiAMZxtf9tfq+rNOcxSNho6pwhOJU3Ir4a99VuE
h/GVLujSHbBd2IbvrOizxWg4+vdJ5IxSct7QIU6kKRq229SNKb+4/JLVR3FiNWUf
QkEdqjNX1mrTBzgc5CoYI/Udp8udY/XAhi=
=BXM4
-----END PGP SIGNATURE-----
[ Auf dieses Posting antworten ]