bugtraq - Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20050311040746.58060.qmail@smasher.org>
Date: Thu, 10 Mar 2005 23:09:45 -0500 (EST)
From: Atom Smasher <atom@...sher.org>
To: Ryan Cummings <ryan.r.cummings@...il.com>
Cc: BugTraq@...urityfocus.com
Subject: Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, 10 Mar 2005, Ryan Cummings wrote:

> Lingo only uses UDP ports 5060-5065, 1020-1030, 10000-20000.  You can 
> set your ATA device up behind a firewall/router just as long as your 
> forward these ports to it.  This will take care of the remote access and 
> still allow your normal VoIP service to work.  I'm away from home right 
> now but when I get back I'll take some time to analyze the traffic it 
> creates and report my findings.
================

i've got mine running behind a firewall/router without opening any ports 
to it. i plugged it in, waited a few minutes for the lights to turn green, 
and started talking. the "Alternate Method" of installation confirms that 
this is supported - http://lingosupport.com/install_multi_02.html


- -- 
         ...atom

  _________________________________________
  PGP key - http://atom.smasher.org/pgp.txt
  762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
  -------------------------------------------------

 	"If Jesus Christ were to come today, people would not
 	 even crucify him. They would ask him to dinner, and
 	 hear what he had to say, and make fun of it."
 		-- Thomas Carlyle

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures

iQEcBAEBCAAGBQJCMRoPAAoJEAx/d+cTpVci4iUIALi83J7N7uIe0xHLdXbL3Kjr
s64lBI6O5pEUaXyqTI5oSqJq4pWM2lHtq72hB71/8XennHKx1I5bSSv13LVpvhGd
02BbWMgT3guKqFJ0POXSH4vL5VXOx69jJeSdc3QRBCeuGa1tBzLzGc53h7/MNGIl
IaP7y7BbGxhIvMf89EOn/Pvva2ZMl/6Jvm2qNUkOygM9jkl6Z7SL+XgGKEKVevXV
0o3TpVBvtgvRGw7YopbRFGF+aU9zIDe0qDKEBOVIMJQHC7dm7/Gj7FkSJDeHYTIv
y2upqLln/p79ORhgM1/VRo7GW5vebnzWLmpv6Gs28y1aOmY3fhZvsIFatDPnzqE=
=qj5E
-----END PGP SIGNATURE-----