Re: Netgear WG602 Accesspoint vulnerability

To: full-disclosure@xxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Netgear WG602 Accesspoint vulnerability
From: James Garrison <jhg@xxxxxxxxxxxxxxx>
Date: Sat, 05 Jun 2004 19:34:32 -0500
Cc: cert@xxxxxxxx
In-reply-to: <20040603220313.GB2307@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: Athens Group, Inc.
References: <Pine.GSO.4.33.0406031903380.14119-100000@xxxxxxxxxxxxxxxxx> <20040603220313.GB2307@xxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113

CORRECTION - Firmware is 3.1RC5 not 2.0RC5 as I first stated

My WG602v2 with firmware 3.1RC5 does not appear to be vulnerable.
                         ^^^^^^

I cannot login with the super/5777364 combination.

Lupe Christoph wrote:

On Thursday, 2004-06-03 at 19:35:22 +0200, Tom Knienieder wrote:

       Possibly vulnerable (not verified)
               WG602 with other Firmware Versions
               WG602v2


--
James Garrison                                Athens Group, Inc.
mailto:jhg@xxxxxxxxxxxxxxx                    5608 Parkcrest Dr
http://www.athensgroup.com                    Austin, TX 78731
PGP: RSA=0x92E90A3B DH/DSS=0x498D331C         (512) 345-0600 x150

References:
- Netgear WG602 Accesspoint vulnerability
  - From: Tom Knienieder
- Re: Netgear WG602 Accesspoint vulnerability
  - From: Lupe Christoph

Prev by Date: MS ISA SP2 out last month
Next by Date: RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan)
Previous by thread: Re: Netgear WG602 Accesspoint vulnerability
Next by thread: Re: Netgear WG602 Accesspoint vulnerability
Index(es):
- Date
- Thread