Re: TCP-ACK vulnerability (was RE: SSH on the router)

[Sean Donelan <sean () donelan com>]

On Wed, 9 Jun 2004, Alexei Roudnev wrote:
> This is minor exploit - usually you set up VLAN1 interface with IP addres,
> which is filterd out from outside. Moreover, there is not any good way to
> find switch IP - it is transparent for user's devices.

Yeah, port scanners are so rare on the Internet they'll never find your
IP address.  Its not as if the switches have an easy to detect banner
signature, and everyone uses out-of-band management for all their network
equipment.