SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Ascend Communications (ASND)
ASND 211.69+5.1%12:35 PM EST

 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext  
To: Chris Ariens who wrote (39358)3/16/1998 5:46:00 PM
From: Nazbuster  Read Replies (4) of 61433
 
I read/printed the Secure Networks report since I have an Ascend Pipeline 50 for our 5-person office. Here's what it is all about:

1) Ascend implemented a system whereby they can broadcast a message to the network with an identifier to which only Ascend routers will respond. Once the routers respond, the network management software has a picture of the whole Ascend network world in question.

2) This is done using a specially formatted UDP packet to the "discard" port (port 9). [I'm quoting... I don't know this stuff.]

3) There are two passwords built into the routers which allow read and write access by SNMP (Simple Network Management Protocol). The factory delivered default values are "public" and "write".

There are two problems: People can use the default passwords (or others easily guessed) to access the routers and grab the entire configuration, including other passwords for maintaining the router itself; and, It is possible to jam the router by sending an invalid UDP packet to port 9.

The first problem is solved by changing the passwords. (DUH!) I just did this for my own router in about 30 seconds, and I'm NOT a network person. The second problem is a little more difficult, but they suggest temporarily blocking messages to port 9.

This DOES look like a buying opportunity for ASND stock. This whole thing is no big deal, IMO. Any system, Ascend router or otherwise, is vulnerable in exactly the same way if the passwords for access are publicly known...
Report TOU ViolationShare This Post
 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext