bugtraq - DSL router Prestige 650HW-31

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 30 Jun 2004 10:14:41 +0200
From: Sami Gascón <samigascon@...ra.es>
To: <bugtraq@...urityfocus.com>
Subject: DSL router Prestige 650HW-31

Hi, have not much time so here is the thing... There's a bug in the DSL
router Prestige 650HW-31, you just post a long string as password and the
router resets it self so is very easy to make a DNS to this router if people
doesnt have the aproppiate filters on port 80 (I didnt tried on Telnet).
This routers are very sold in Spain by Telefonica de España so spanish
people shouldt take a little care and setup their ports properly. The manual
is in Zyxel webpage so please dont ask me that sort of things. The router
come again online after the reset and syncronize DSL perfectly again.
Software in the router is that shit of Rompager/4.7, maybe its not ok
because I took this with a sniffer from the http header cos I dont have
access to the router I tested.

ç u Sami

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html