SNMP public information |
---|
Risk Level: | Low | Check or Attack Name: snmp_info |
---|---|---|
Platforms: | SNMP | |
Description: | SNMP was found. The SNMP Public information may contain sensitive information that can be used to compromise your computer systems. |
|
Remedy: | If you need SNMP for network management, make sure it is properly configured with private community names. If SNMP is not required, disable the service: Windows NT:
Unix: Disable SNMP if it is not needed. If SNMP is started from the rc script, comment it out as appropriate for your operating system. As an example for disabling SNMP under Solaris 2.6, execute the following commands: # /etc/init.d/init.snmpdx stop |
|
References: | Request for Comment document RFC 1157, A Simple Network Management Protocol (SNMP), ftp://ftp.isi.edu/in-notes/rfc1157.txt |
Know Your Risks |