SNMP Query Routing Information Disclosure

This script is Copyright (C) 2008-2011 Tenable Network Security, Inc.


Synopsis :

The list of IP routes on the remote host can be obtained via SNMP.

Description :

It is possible to obtain the routing information on the remote host
by sending SNMP requests with the OID 1.3.6.1.2.1.4.21

An attacker may use this information to gain more knowledge about the
network topology.

Solution :

Disable the SNMP service on the remote host if you do not use it, or
filter incoming UDP packets going to this port.

Risk factor :

None

Family: SNMP

Nessus Plugin ID: 34022 ()

Bugtraq ID:

CVE ID: