Some sysadmins are leaving their networks open to hacking attack by allowing Simple Network Management Protocol (SNMP) configurations to be read across the internet.

Using SNMP scans, a range of devices including Windows servers, BT Voyager 2000 routers, and HP JetDirect printers might be prompted to cough up username credentials and passwords, according to Adrian Pastor of GNUCitizen.

However, a scan of 2.5 million random IP addresses by GNUCitizen revealed that 5,320 (about one in 500) responded to the submitted SNMP requests. Read access to SNMP configuration lets hackers spy on targeted networks.

The security weakness might easily enable hackers to change device configurations using a spoofed IP address - if a valid write community string is identified or cracked. This invasive hacking attack was not tested by the GNUCitizen scan.

Read-only access might be bad news, Pastor notes. "Even if a cracker only gained read access to a device or server via a SNMP community string, sometimes it would be possible to extract sensitive information such as user names and passwords which would eventually lead to a compromise of the targeted systems." ®

Related stories

• Updated UK's number one router open to VoIP hijacking (21 January 2008)
• Most home routers 'vulnerable to remote take-over' (15 January 2008)
• BT launches Home Hub backdoor investigation (9 October 2007)
• Updated BT home router wide open to hijackers (9 October 2007)