Bug#3108: snmpd provides too much information
Package: snmp
Version: 2.1.2l4-1
The default configuration of snmp provides a lot of information to
anybody than I would expect. Using `snmpwalk host noAuth', I can
obtain the whole process list and the list of mounted file systems and
mount points. At least, the user should be informed about
this. Especially since the man page states that, for public V1 requests, the
process listing is supressed. So why is it included for noAuth
requests using V2 of the protocol?
Cheers,
Lukas
-------------------------------------------------------------------------------
Dr. Lukas Nellen | Email: lukas@teorica0.ifisicacu.unam.mx
Depto. de Fisica Teorica, IFUNAM |
Apdo. Postal 20-364 | Tel.: +52 5 622 5014 ext. 218
01000 Mexico D.F., MEXICO | Fax: +52 5 622 5015
Reply to: