full-disclosure - security hole in german Telekom T-Sinus 111

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: mllist at web.de (Mailinglist)
Subject: security hole in german Telekom T-Sinus 111

Last time i tested some broadband products,

i stopped @ the T-Sinus 111 a wireless broadband router, labeled by
german Telekom.

This device has an integrated DSL Modem and the security bug is that
you can use the router as a modem every time.
Create on your machine a dialupconnection using the "T-Com DSL Adapter
software", the router will disconnect from carrier and the User can dialup.
This allready works with empty settings on the device ...
I think everyone who uses this device is vulnerable for DSL dialer
tools (and DSL by call used by a worker) and at a small company network the connection could always
beeing disconntected.

i tried to report this bug to Telekom, but there?s no reaktion on any
email or telephone call ...

Daniel Wicke

-- 
Best regards,
 Danielsun                          mailto:mllist@....de