V Imp Advisory (trust me...plz?)

  • Thread starter Thread starter St0le
  • Start date Start date
  • Replies Replies 85
  • Views Views 6,062
the file is useless...trycat config.xml | grep adminit shows admin admin thogh i have mine pwd changed!!!
 
come to think of it!! why do they have FTP enabled???

baudhayan, i thought it was for updates tooo

but it doesnt make sense...the updated file (downloaded) has to be directly written into flash memory....and i dont think ftp/tftp daemon
has the "responibility" of validating "updates" and wrting on flash mem!

ftp does make sense? but its still strange!?

webinterface has no options for "update"...the D-Link website mentions
504t is tftp upgrade!!


www.dlink.com.au/Default.aspx?ArticleID=1374

502t is probably a "primitive version" of 504t
maybe the dlink ppl jjust released 502t for fun!
microsoft stratergy!! (winME was useless...pointless!)

this is turining from "Broadbandforum" - >"securityforum"...
 
Originally posted by caterpillar@Dec 7 2005, 09:43 PM
The moderator of this forum may delete this post if it is found inappropriate for discussion.

max, don't expect me to prove anything here. Thats not the reason why I visit this forum. If you want to satisfy your curiosity... look it up yourself using any popular search engine.

Here's an extract of what I've come across...
[snapback]34724[/snapback]
Click to expand...
[/quote]
haha. There wouldn't be a vulnerability in the first place if the router is setup correctly ;) If the firewall was enabled by the user then this "vulnerability" is effectively neutralized ;)
 
Originally posted by max@Dec 7 2005, 11:09 PM
If the firewall was enabled by the user then this "vulnerability" is effectively neutralized ;)
[snapback]34766[/snapback]
Click to expand...
[/quote]

Not enabling firewall "by default" is a vulnarability in itself.
 
You probably know this already...TFTP is fast but has no directory-browsing abilities or authentication as with FTP. It can do nothing but send and receive files, which is why it is the protocol used for firmware upgrades and configuration backups in most network devices (as baudhayan posted earlier).If I'm not mistaken, it would place the new file image in flash memory and replace the existing file. It wouldn't validate the update... and it does not use FTP.
 
you maybe right but 502t does not has tftp updates!!! thats my point!why is it there then!??!...D-Link forgot to remove it??if the router doesnt validate the update....which means any junkfile can be forwarded and can cause the entire thing to corrupt???!! if there is no authentication??!! i dont think so! any1 want to try it on their router?? volunteers???Btw , welcome to the forum caterpillar...tell evry body about urself....we like to hear about yo.....*yawn*...zzzzz
 
i ahvent (speeling...hahahaaa ) read it.....but i'll laugh anyway!!while(1){printf("hahahaaaa");//plogrammers speel wlong coj itz cuol}i have couple of such "stories"vince start a thread in humour...with that story...i'll post mine l8r
 
someone has to tell me if this thread is supposed to be moved away from public forum or not?
 
You must log in or register to reply here.
Back