bugtraq - Re: Asante FM2008 10/100 Ethernet switch backdoor login

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 24 Jul 2009 02:30:32 -0000
From: secfocus2@....philipps.us
To: bugtraq@...urityfocus.com
Subject: Re: Asante FM2008 10/100 Ethernet switch backdoor login

Asante have released v1.07 of this switch's firmware which removes the "superuser" "asante" CLI credentials.  After uploading this firmware into my switch, I examined a TFTP dump and could not identify similar credentials.  It does not positively rule in or out that the backdoor is gone, but Asante claim in their notes on the new firmware this back door has been removed.