Arescom NetDSL DSL Router Administrative Access Password Vulnerability
BID:4066
Info
Arescom NetDSL DSL Router Administrative Access Password Vulnerability
| Bugtraq ID: | 4066 |
| Class: | Configuration Error |
| CVE: |
CVE-2002-0255 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 08 2002 12:00AM |
| Updated: | Jul 11 2009 10:56AM |
| Credit: | This vulnerability was announced by Powertech <[email protected]> on February 8, 2002. |
| Vulnerable: |
Arescom NetDSL 800U 0 |
| Not Vulnerable: | |
Discussion
Arescom NetDSL DSL Router Administrative Access Password Vulnerability
NetDSL routers are a hardware solution manufactured by Arescom. They are designed to provide high-speed internet access to home and home-office users.
A problem with some NetDSL routers could make it possible for a remote user to gain administrative access on the router. The problem is in the handling of authentication.
Some NetDSL routers do not properly control access to administrative functions by default. It has been reported that NetDSL 800 routers by default permit access via telnet, and additionally do not require a password to gain administrative access.
This problem makes it possible for remote users to gain administrative access to a NetDSL router, and potentially reconfigure the router, resulting in a denial of service.
NetDSL routers are a hardware solution manufactured by Arescom. They are designed to provide high-speed internet access to home and home-office users.
A problem with some NetDSL routers could make it possible for a remote user to gain administrative access on the router. The problem is in the handling of authentication.
Some NetDSL routers do not properly control access to administrative functions by default. It has been reported that NetDSL 800 routers by default permit access via telnet, and additionally do not require a password to gain administrative access.
This problem makes it possible for remote users to gain administrative access to a NetDSL router, and potentially reconfigure the router, resulting in a denial of service.
Exploit / POC
Arescom NetDSL DSL Router Administrative Access Password Vulnerability
No exploit is required for this vulnerability.
No exploit is required for this vulnerability.