bugtraq - Re: LinkSys WRT54G administration page availble to WAN

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 3 Jun 2004 11:17:27 +0200
From: "Peter Becker" <peter.becker@...rkassel.de>
To: <bugtraq@...urityfocus.com>
Subject: Re: LinkSys WRT54G administration page availble to WAN

> I have a WRT54G at home.  After seeing all the discussion here about the
> remote administration vulnerability I tried to access the web interface
> today on ports 80 and 443 from outside of my home network and was not able
> to get to the web interface either.
>
> But, having said that, I'm still fairly disappointed with this product.
> Linksys used to incorporate SNMP support that made it possible to use
> Linklogger, a very inexpensive and capable firewall logger.  But, it
appears
> that SNMP and syslog support are gone.  I contacted tech support about
this
> and they agreed that the WRT54G has no support for external event logging.
> Too bad.

There are several other firmwares for this product.
I use OpenWRT this is realy great.
I don't know, if the other firmware makes it possible to external event log,
but you could make nfs-mounts so you could write the eventlog on a
network-share.

To the issue:
I tested the original firmware before flashing.
And I also wasn't able to access the webinterface from the wan-port.
I've got hardware revision 2.

Peter