SecurityFocus

several vulnerabilities present in Belkin wireless routers Jul 15 2005 08:14AM
m123303 securityfocus com, "[at]" securityfocus com,richmond ac uk securityfocus com (3 replies)

Re: several vulnerabilities present in Belkin wireless routers Jul 24 2005 10:04PM
E. Kellinis (me cipher org uk)

Re: several vulnerabilities present in Belkin wireless routers Jul 16 2005 10:53AM
nicolas.ruff (at) gmail (dot) com [email concealed] (nicolas ruff gmail com)

Re: several vulnerabilities present in Belkin wireless routers Jul 15 2005 03:37PM
Steve Kemp (steve steve org uk)

On Fri, Jul 15, 2005 at 08:14:14AM -0000, m123303 (at) securityfocus (dot) com [email concealed] wrote:

> The first problem is the existance of a default telnet backdoor
> running on the usual 23/tcp port. From my experience, telnet
> interfaces are NOT enabled by default in wireless routers but rather,
> they usually need to be enabled from their administrative web
> interfaces manually:
>
>
> <Start of output>
>
> Starting nmap 3.75 ( http://www.insecure.org/nmap/ ) at 2005-06-06
> 18:34 BST
> Initiating SYN Stealth Scan against BelkinModem.Belkin (192.168.2.1)

The obvious question to ask here, is "Can the telnet service be
connected to from the WAN side?".

All the later content you present, whilst interesting, is of
less value if the attacker must be on the LAN side of the router.

Steve
--
# Debian System Administration
www.debian-administration.org/

[ reply ]