Multiple Telecom Italia Routers Authentication Bypass Vulnerability

Bugtraq ID:	31754
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 14 2008 12:00AM
Updated:	Oct 16 2008 08:57PM
Credit:	saxdax & drpepperONE.
Vulnerable:	Telecom Italia AGPV-AGPF 0 Telecom Italia AGB 0 Telecom Italia AGA 0 Telecom Italia AG2P-AG3 0
Not Vulnerable:

Multiple Telecom Italia Routers Authentication Bypass Vulnerability

Multiple Telecom Italia routers are prone to an authentication bypass vulnerability that may allow attackers to gain access to a router's administration interface and unauthorized access to certain services.

Successfully exploiting this issue will allow attackers to gain unauthorized administrative access to the affected device and activate services such as telnet, ftp, and tftp.

The following routers are affected.

AGA (Alice Gate2 plus Wi-Fi])
AGB (Alice Gate2 plus)
AG2P-AG3 (AG2P-AG3[Alice Gate W2+)
AGPV-AGPF (Alice Gate VoIP 2 Plus Wi-Fi)

Multiple Telecom Italia Routers Authentication Bypass Vulnerability

Attackers can exploit this issue using readily available networking utilities.

The following exploit code is available:

• /data/vulnerabilities/exploits/31754.c

Multiple Telecom Italia Routers Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Telecom Italia Routers Authentication Bypass Vulnerability

References:

• Vendor Homepage (Telecom Italia)
  
• Telecom Italia Alice Pirelli routers backdoor discoverd to ([email protected] )