lesdickert@att.net writes:
> Or, if you want it to work just like in 6.0.3,
> create a file in /usr/OV/bin called
>
> netnmrc.pre
>
> with one line in it:
>
> export AdditionalLegalTrapCharacters=disable
>
> and bring netview down and back up and then trapd
> will quit putting those annoying \ characters into
> the varbind data.
>
> Oops! Was I not supposed to reveal this secret???
Well, if you're comfortable allowing any device with udp/162
visibility to your netview server capable of running arbitrary
commands in root context on your NetView server.
I'm under the distinct impression that this would leave you wide open
to a handy root compromise per.
http://www.cert.org/advisories/CA-2001-24.html
I for one wouldn't advocate disabling that fix.
--
Todd H.
http://www.toddh.net/
|