Signature Detail
Short Name |
SNMP:COMMUNITY:ILMI |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
SNMP |
Keywords |
Interim Local Management Interface (ILMI) |
Release Date |
2004/12/13 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SNMP: Interim Local Management Interface (ILMI)
This signature detects the SNMP Community string "ILMI." This can allow an attacker to read/write to several different OID's on ATM enabled Cisco Devices.
Extended Description
IOS is the operating system designed for various Cisco devices. It is maintained and distributed by Cisco systems. A problem in the versions of IOS 11.x and 12.0 could allow unauthorized access to certain configuration variables within a Cisco device. The ILMI SNMP Community string allows read and write access to system objects in the MIB-II community group. These configuration parameters do not affect the normal operation of the device, although if changed, can cause confusion or lead to a social engineering attack. It is possible for a malicious remote user to change configuration objects within the MIB-II Community, and rename the system, change the location name in the system, and/or the contact information for the system. This vulnerability affects only certain devices.
Affected Products
- Cisco IOS 11.0
- Cisco IOS 11.1
- Cisco IOS 11.1AA
- Cisco IOS 11.1CA
- Cisco IOS 11.1CC
- Cisco IOS 11.1CT
- Cisco IOS 11.1IA
- Cisco IOS 11.2(4)XA
- Cisco IOS 11.2(9)XA
- Cisco IOS 11.2BC
- Cisco IOS 11.2GS
- Cisco IOS 11.2P
- Cisco IOS 11.2SA
- Cisco IOS 11.2WA3
- Cisco IOS 11.3
- Cisco IOS 11.3(2)XA
- Cisco IOS 11.3AA
- Cisco IOS 11.3DA
- Cisco IOS 11.3DB
- Cisco IOS 11.3MA
- Cisco IOS 11.3NA
- Cisco IOS 11.3T
- Cisco IOS 11.3WA4
- Cisco IOS 12.0
- Cisco IOS 12.0DA
- Cisco IOS 12.0DB
- Cisco IOS 12.0DC
- Cisco IOS 12.0S
- Cisco IOS 12.0SC
- Cisco IOS 12.0SL
- Cisco IOS 12.0ST
- Cisco IOS 12.0SX
- Cisco IOS 12.0T
- Cisco IOS 12.0W5
- Cisco IOS 12.0WT
- Cisco IOS 12.0XA
- Cisco IOS 12.0XB
- Cisco IOS 12.0XC
- Cisco IOS 12.0XD
- Cisco IOS 12.0XE
- Cisco IOS 12.0XF
- Cisco IOS 12.0XG
- Cisco IOS 12.0XH
- Cisco IOS 12.0XI
- Cisco IOS 12.0XJ
- Cisco IOS 12.0XK
- Cisco IOS 12.0XL
- Cisco IOS 12.0XM
- Cisco IOS 12.0XQ
- Cisco IOS 12.0XR
- Cisco IOS 12.0XS
- Cisco IOS 12.0XV
References
- BugTraq: 2427
- CVE: CVE-2001-0711
- URL: http://www.cisco.com/warp/public/707/ios-snmp-ilmi-vuln-pub.shtml