bugtraq - Re: Linksys phone adapter denial of service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <47E7DC6C.1020201@infiltrated.net>
Date: Mon, 24 Mar 2008 12:53:00 -0400
From: "J. Oquendo" <sil@...iltrated.net>
To: orsino <bugtraq.account@...glemail.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Linksys phone adapter denial of service

orsino wrote:
> There's a difference between being able to get onto a network (via wifi
> maybe?) and getting physical access to a device.

For starters this is a VoIP device (Product Name:   SPA-2102), but even 
if it weren't it makes no difference to me and in the security realm it 
shouldn't make a difference to anyone else either.

1) I don't have an open network and if you do and are on this list its 
either going to be a honeypot or for theft of information (bad guys roam 
this list too)

2) Think about how insanely stupid it would be to "go on a live network" 
then ping a VoIP device offline. What does this accomplish other then 
pure stupidity.

3) Where is the vendor contact information. Was this meant to be posted 
to Bugtrag or Fool Disclosure?

-- 
====================================================
J. Oquendo

SGFA #579 (FW+VPN v4.1)
SGFE #574 (FW+VPN v4.1)

wget -qO - www.infiltrated.net/sig|perl

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x3AC173DB

Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (5533 bytes)