Re: Integrating net-SNMP agent into my application

It is a TCP/IP socket.  I am afraid i don't follow you. Sockets do not have 
any rights. Anyone can read/write to them. That's what makes Internet work.

Just try telneting to the port and you are talking to AgentX. The fact that 
the underlying agent runs as root means only just that any possible 
exploitation that ends up to a shell would give a root shell.

I didn't know you can restrict AgentX to accept connections from localhost 
only. How do you configure this?

BR,
Nikos
----- Original Message ----- 
From: "Vincent Bernat" <[email protected]>
To: <[email protected]>
Sent: Sunday, January 04, 2009 12:02 AM
Subject: Re: Integrating net-SNMP agent into my application


> OoO En ce dΓ©but de soirΓ©e  du samedi 03 janvier 2009, vers 21:34, "Nikos
> Balkanas" <[email protected]> disaitΒ :
>
>> Yes, but there are security concerns. Agentx doesn't require 
>> authentication
>> and opens up TCP 705. Anyone with access to port 705 on your server can
>> hijack your snmpd master agent, server and application.
>
> Well, it depends. By default, on Unix, it is a socket which is used. You
> can  set whatever  rights  you want  on  it (only  writable  by root  by
> default).
>
> You can also starts AgentX for localhost only.
> -- 
> BOFH excuse #422:
> Someone else stole your IP address, call the Internet detectives!
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
> 


------------------------------------------------------------------------------
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users