True, true.... however, a buddy of mine in security has said (from his experiences wearing the black hat) that you wouldn't believe how many routers are setup with 'cisco/cisco' as the telnet and enable password..... =)
Mike W. "Dan Penn" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Now that would be a tricky virus...but I guess if someone wanted to do > it, it would be possible to write up a little worm that instead of > trying to find unpatched IIS servers looks for routers with the RW > community of "private" then erases their config. However I don't think > you are going to find that many routers compared to unpatched IIS > systems. > > Dan > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of > Michael L. Williams > Sent: Monday, June 24, 2002 8:05 PM > To: [EMAIL PROTECTED] > Subject: Re: klez crashed our router [7:47323] > > Yes..... being very aware of Klez and what it does/can do, I was taking > his > statement that the 3640 needed to be restarted as an implication that > perhaps the router got the virus. That's why I was asking for a > clarification. =) > > Mike W. > > "Brian Backer" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Dude, you mis read..... it's shares on attached networks, not on the > > routers :) > > B > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf > Of > > Michael L. Williams > > Sent: Monday, June 24, 2002 8:41 PM > > To: [EMAIL PROTECTED] > > Subject: Re: klez crashed our router [7:47323] > > > > Shares? On Routers? Tell me more...... > > > > Mike W. > > > > "Dan Penn" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Yes, some forms of the Klez infects network shares. > > > > > > Dan > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf > > Of > > > Gary Crouch > > > Sent: Monday, June 24, 2002 4:50 PM > > > To: [EMAIL PROTECTED] > > > Subject: klez crashed our router [7:47323] > > > > > > I user brought in the w32.klez.h.mm virus our virus software was > > able > > > to > > > stop it from spreading but our router 3640 router stop responding > and > > > had to > > > be restarted. > > > > > > Can this virus attack shares on networks connected to the router? > can > > > klez > > > spread across the router using other then smtp? > > > > > > we curently have NBAR set up for block code red type viruses. > > > > > > Thanks > > > > > > Gary Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=47349&t=47323 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
