Contact Us


Press Release

InterWorking Labs Announces "Boreal, the SNMP Vulnerability Test Suite"

Network Administrators can automatically test the robustness of all the devices on their networks for SNMP v1, v2c, and v3 vulnerabilities.

SCOTTS VALLEY, Calif. (July 8, 2002) - InterWorking Labs, developers of state-of-the-art tests for computer networking standards compliance, today announced Boreal, the SNMP Vulnerability Test Suite. Boreal is a new test suite for network administrators and testers to verify the robustness of their network devices in the face of SNMP vulnerabilities.

The Computer Emergency Response Team (CERT) issued an Advisory on Multiple Vulnerabilities in many Implementations of the SNMP Protocol. The CERT found that many network devices implementing SNMPv1 crash when receiving malformed packets, either as a result of a Denial-of-Service attack, or as a result of random network abnormalities. This results in disabling computer systems and networks--ultimately disrupting the organization.

While many manufacturers of network devices have produced patches to address these vulnerabilities in their products, network administrators must verify that the patches are correctly installed and effective, and must proactively test network devices implementing SNMPv2c and SNMPv3, since the CERT Advisory only covers SNMPv1.

Boreal includes more than 700,000 vulnerability tests for SNMP v1, v2c, and v3 agents.

Boreal allows the network administrator to uncover the vulnerabilities in a network device in three easy steps: (1) Enter the name of the device, (2) Select "Test All", (3) Save the Results Report for inspection or send it to the network device supplier.

Boreal can also, automatically, test all the network devices in a network, by using an automated command line script.

"Boreal is totally awesome," reports Christian Thamer, Network Administrator, "I crashed more than half the devices in my network, and quickly determined that many of the updated and patched devices still had problems. I would recommend Boreal to anyone responsible for managing a network."

Network administrators can also turn on debugging output to pinpoint the precise sequence and type of packet that caused the failure for more detailed reports to provide the network device supplier. The network administrator may also change values and parameters in the test cases.

Boreal contains no Free Software Foundation-GNU License dependencies. All the code is the original work of InterWorking Labs.

For manufacturers and software developers, Boreal can be integrated with InterWorking Labs' SilverCreek, the official SNMP Test Suite, to provide more capabilities to the tester who would like a full and complete picture of all aspects of SNMP agent quality.

Boreal is available for Windows, Solaris, and Redhat Linux. Prices start at $1,295 for the network administrator version.

CERT Advisory CA-2002-03, see