3com bay交换机 路由器的另类默认帐号密码信息来源:牛哥3COM用一种很奇怪的方式来维护他们售出的设备,任何的下列密码都是更高权限,可以自由设置设备。 CoreBuilder 6000/2500 - username: debug password: synnet CoreBuilder 3500 (Version 1.0) - username: debug password: synnet CoreBuilder 7000 - username: tech password: tech SuperStack II Switch 2200 - username: debug password: synnet SuperStack II Switch 2700 - username: tech password: tech Bay Networks似乎感觉3com的这种方式很好,于是在他们350(也许还有其他型号)的产品里也加进了后门密码 "NetICs" ,类似情况没有在accelar产品系列里获得报道。 除了交换机之外,3com在访问服务器里也加入了默认密码,用户名是"adm",密码为空。 在极端的情况下,这可以作为恢复密码的一个手段。 在使用Nortel(Bay)的交换机时,不小心发现几乎Bay全部产品都有隐藏模式, 350/450上是按一下 ctrl-H 或者是退格键,可以进入Hidden Menu。 在Accelar 1100/1200 上,输入 sh h ,你会看到一些隐藏命令的列表,其中有个 privilige命令,必须有rwa的用户登录以后执行,执行以后,可以进入一个特权模式, 提示符也变为 * ,然后可以输入"shell",进入一个特别的环境,看help,是些调试功能, 呵呵,很有趣,希望有人能够继续挖掘下去。http://XXX.com/~watchsea/otherswi.htm 3Com Security Advisory for CoreBuilder and SuperStack II customers 3Com is issuing a security advisory affecting select CoreBuilder LAN switches and SuperStack II Switch products. This is in response to the widespread distribution of special logins intended for service and recovery procedures issued only by 3Com''s Customer Service Organization under conditions of extreme emergency, such as in the event of a customer losing passwords. Due to this disclosure some 3Com switching products may be vulnerable to security breaches caused by unauthorized access via special logins. To address these issues, customers should immediately log in to their switches via the following usernames and passwords. They should then proceed to change the password via the appropriate Password parameter to prevent unauthorized access. CoreBuilder 6000/2500 - username: debug password: synnet CoreBuilder 3500 (Version 1.0) - username: debug password: synnet CoreBuilder 7000 - username: tech password: tech SuperStack II Switch 2200 - username: debug password: synnet SuperStack II Switch 2700 - username: tech password: tech The CoreBuilder 3500 (Version 1.1), SuperStack II Switch 3900 and 9300 also have these mechani *** s, but the special login password is changed to match the admin level password when the admin level password is changed. Customers should also immediately change the SNMP Community string from the default to a proprietary and confidential identifier known only to authorized network management staff. This is due to the fact that the admin password is available through a specific proprietary MIB variable when accessed through the read/write SNMP community string. This issue applies only to the CoreBuilder 2500/6000/3500 and SuperStack II Switch 2200/3900/9300. Fixed versions of software for CoreBuilder 2500/6000/3500 and SuperStack II Switch 2200/39 |
c5game是目前中国最大的DOTA2和CSGO饰品交易网站平台,平台功能包括游戏道具担保交易平台、竞拍抢购专区、电子竞技玩家社区交流、数据深度查询分析等等。平台很。 C5没有听说过,找好的交易平台,...
连年来,经济程度不绝的成长不绝的进步,公共加盟商对付餐饮行业市场上的加盟品牌加盟项目也是跃跃欲试,可是公共加盟商创业者对付加盟品牌也是无从下手,又因为加盟品牌浩瀚使得加盟商一筹莫展。可是龙记斑鱼暖锅加...
本文导读目录: 1、登上朋友的qq怎么查聊天记录 2、没有关联对方QQ怎样才能收到对方的聊天记录? 3、怎么看qq别人聊天记录? 4、怎样能查询到两个人之间的QQ聊天记录 5、qq对方...
本文目录一览: 1、为什么高级黑客攻入银行系统,却只黑了一分钱? 2、银行系统有哪些措施防“黑客”攻击 3、黑客攻击过哪些银行 4、若金融系统被黑客入侵会出现什么现象? 为什么高级黑客攻...
本文导读目录: 1、有什么恐怖西片好看? 2、介绍几部最新电影 3、请推荐几部好的电影啊 4、给我推荐几部电影 5、求好看的电影 6、有什么好看的科幻片么? 7、好电影!!!!...
大伙儿找寻商务的信息是否都从在网上找的呢?大伙儿很猜疑这种信息的真实有效都是会明确提出去找“武汉市商务中介公司”在网上售卖商务信息是否确实”那样的疑惑?,实际上做为一个有经验人而言,我认为在网上进出的...