drama yet recruits Georgina's bottom

DESPITE REPEATED SISS REPORTS!

This report should be taken as a complaint that insufficient procedures
have been put in place to ensure current and new Salomon personnel are
made aware of the security issues of Internet transmissions for network
device configuration files. Suggest wide-spread distribution of a memo
concerning the problem. Perhaps place "no-Internet-transmission" comments
in all network config files. Standard warning issued to all new networkers.

Three transmissions of live passwords to three different Salomon routers
have been sent in cleartext over the Internet by Rock Transves nnn-nnnn
of Internet Client Services:


SENDER DATE ROUTER LINE PASSWORD

Rock Transves 6/27/96 09:37 bc7f7w40 [global] bs345way
[and again on] 6/26/96 16:10 con 0 bs345way
aux 0 bs345way
vty 0 qwerty0

Rock Transves 6/18/96 11:27 ard7w35 [global] z23c4v5b
trangobw1 [global] bs345way
con 0 bs345way

ALL OF THESE ROUTERS *AND* ALL ROUTERS USING THE SAME PASSWORDS
MUST HAVE THEIR PASSWORDS CHANGED.
[snip]




*******************************************************************************
*******************************************************************************
*******************************************************************************

SECURITY INCIDENT REPORT, 7/3/96

OASYS SOURCE CODE:

38,696 PROPRIETARY LINES

--------------------------------

This is a security incident report regarding the Internet (a public wire)
traffic of Salomon B


.

Relevant Pages