full-disclosure - ELSA Lancom Router Discloses the Administrator Password to Remote Users

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed Aug 31 10:25:40 2005
From: winsoc at googlemail.com (winsoc)
Subject: ELSA Lancom Router Discloses the Administrator
	Password to Remote Users

> 
> It is reported that the default configuration allows a remote user to 
> connect to the router via port 80 with a web browser and obtain the remote 
> access password, which is apparently stored in clear text. The remote user 
> can also change the router's configuration and can remotely upgrade the 
> firmware. 
> 
 *Impact:* A remote user can obtain the administrator password, change 
routing tables, and upload modified firmware.
  *Solution:* No solution was available at the time of this entry.

The author of the report has provided the following recommendations:

- Change the configuration port. 
- Give access privileges during initial configuration to only internal ip 
addresses.
- Install a firewall with appropriate rules.

 Does anyone know how to get this P/W?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050831/a86ef017/attachment.html