dslreports logo
 
    All Forums Hot Topics Gallery
spc
view:
topics flat nest 
Comments on news posted 2013-10-15 08:01:14: A back door has been found in the firmware for a number of later-model D-Link router models, allowing an intruder to bypass user authentication. ..


dvd536
as Mr. Pink as they come
Premium Member
join:2001-04-27
Phoenix, AZ

dvd536

Premium Member

xmlset_roodkcableoj28840ybtide

"edit by 04882joel backdoor"
guessing the dudes nick was 04882joel. rofl!

ARGONAUT
Have a nice day.
Premium Member
join:2006-01-24
New Albany, IN

ARGONAUT

Premium Member

:P

D-Link has a backdoor love affair.. ZZ Top fan forever!
88615298 (banned)
join:2004-07-28
West Tenness

88615298 (banned)

Member

Not shocking at all

It's D-Link

bobjohnson
Premium Member
join:2007-02-03
Spartanburg, SC

bobjohnson

Premium Member

Is this surprising?

As you get what you pay for. It doesn't surprise me at all that the cheapest line of routers has some security flaws. D-Link is not a brand that I have ever considered anyway.
tkdslr
join:2004-04-24
Pompano Beach, FL

tkdslr

Member

No patches for older products.

One of my clients uses a DI-604.. Which has kept them relativity secure(no successful direct outside attacks) for many years..

It's fast enough to keep up with my clients 6Mb/sec aDSL connection.

But the last firmware/backdoor update is dated 2008.. and it doesn't look like D-link is going to update it..

I guess it just confirms my suspicions and adds to my justification for picking up a pair of Dual band(5//2.4Ghz) net gear routers which I plan on flashing DD_WRT onto..

No more back doors.. Can/will be supported for a long time to come.

None of this two years after last sale and no more support crap.

SysOp
join:2001-04-18
Atlanta, GA

SysOp

Member

Privacy and Security #Freedomz

douchbag dlink locks up constantly freezes with genuine admin pass latest firmware idle gigabit lan;

twice as fast and double the bandwidth in NSA backdoor mode

pjhofmann
join:2000-08-22
Argyle, TX

1 recommendation

pjhofmann

Member

Which movie :) ?

Mr. Potatohead!... Mr Potatohead!! Backdoors are not secrets !!!

newview
Ex .. Ex .. Exactly
Premium Member
join:2001-10-01
Parsonsburg, MD

newview

Premium Member

Now they'll stay way in droves

D-link has never been in contention for any router purchase I was contemplating.

Thank god for my spidey sense.

SimbaSeven
I Void Warranties
join:2003-03-24
Billings, MT

1 recommendation

SimbaSeven

Member

dd-wrt or OpenWrt

One reason I utilize dd-wrt/OpenWrt-compatible routers.

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN

Member

Not all products are affected...

This only effects those routers listed and doesn't effect much of anything else. All of those models listed are already Phased out and no longer developed on. The DIR-100 is still active however is only marketed in the EU. Check with D-Link if your really concerned about this on the phone. I'm sure not all products are affected.

AnonMe
@comcastbusiness.net

AnonMe

Anon

Why is this a problem?

I thought ALL DLink products died 13 months after being out of the box! Every D-Link I have ever owned has crapped out within a year or so of purchasing.

Meh
@74.63.112.x

Meh to 88615298

Anon

to 88615298

Re: Not shocking at all

said by 88615298:

Not shocking at all. It's D-Link

I would think almost all programmers everywhere code in back doors to their systems just so that when level3 support has to get in to a screwed up system they have a way in.

NetFixer
From My Cold Dead Hands
Premium Member
join:2004-06-24
The Boro
Netgear CM500
Pace 5268AC
TRENDnet TEW-829DRU

NetFixer

Premium Member

What is a "later-model" D-Link router

I don't know what either Karl or Justin consider a "later-model" D-Link router, but I just tested the three active D-Link routers on my network (DIR-601-A1, DIR-655-B1, and EBR-2310-C1) for both LAN and WAN access, and none of them paid any attention to the backdoor user-agent.

If you have a D-Link router, and you are concerned about this backdoor revelation, just use a Mozilla based router with a user-agent changer add-on and test it. And if you want to test and make sure that your user-agent is correctly setup, feel free to use my »portscan.dcsenterprises. ··· nection! on-line html environment test.

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN

Member

I think it only effects those older models that had this code. It was probably never removed as they when into Phase Out status and wasn't removed or fixed, and most of the other products now days are are different platforms which never had this problem. Thanks for sharing your results.
CXM_Splicer
Looking at the bigger picture
Premium Member
join:2011-08-11
NYC

1 recommendation

CXM_Splicer to pjhofmann

Premium Member

to pjhofmann

Re: Which movie :) ?

But your giving away our best tricks!!

exocet_cm
Writing
Premium Member
join:2003-03-23
Brooklyn, NY

exocet_cm to pjhofmann

Premium Member

to pjhofmann
WarGames. Good movie.

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN to AnonMe

Member

to AnonMe

Re: Why is this a problem?

I have have my DGL-4500 from 2007, still working well for me. I have others too spanning longer than 13 months....Sounds like a user configuration issue to me.

battleop
join:2005-09-28
00000

battleop to Meh

Member

to Meh

Re: Not shocking at all

Only if they are not security minded. If it exists it can be exploited.

PapaMidnight
join:2009-01-13
Baltimore, MD

PapaMidnight to tkdslr

Member

to tkdslr

Re: No patches for older products.

Perhaps it's just my opinion, but DD-WRT support has been slipping as well, and for the past few years at that. Don't even get me started on Tomato. When pfSense 1.2.3 was released a few years back, I just went that route and haven't looked back.

pjhofmann
join:2000-08-22
Argyle, TX

pjhofmann to exocet_cm

Member

to exocet_cm

Re: Which movie :) ?

Love that movie, came out during my early teens.

That was the best scene of the movie

"Remember when you told me to tell you when you're being rude and insensitive."

Shakes head.

"You're doing it right now."

HA !

Scree
In the pipe 5 by 5
join:2001-04-24
Mount Laurel, NJ

Scree to bobjohnson

Member

to bobjohnson

Re: Is this surprising?

wow

cork1958
Cork
Premium Member
join:2000-02-26

cork1958 to AnonMe

Premium Member

to AnonMe

Re: Why is this a problem?

Never had a single issue with either of the D-Links I've owned either, as far as crapping out anyway.

My sister still uses the first one I bought some 13 years ago, I believe. It does have one bad port on it that doesn't work.

Main reason I went with another brand is to be able to load Tomato on it, which isn't al it used to be cracked up to be anymore either.

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN to AnonMe

Member

to AnonMe
I think using 3rd party FW is fun and kewl to check out for us geek people. However one a daily basis for the avg Joe...Might be best to keep OEM FW.

camper
just visiting this planet
Premium Member
join:2010-03-21
Bethel, CT

camper

Premium Member

My web server is being scanned...

> If your browser’s user agent string is 'xmlset_roodkcableoj28840ybtide' (no quotes), you can access the web interface without any authentication and view/change the device settings," notes Heffner.
 

 

My web server is being scanned using that agent string. I was wondering why the scans started up all of a sudden....

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN

Member

What model router do you have?

Pureblood
'Let's Go Brandon'
Premium Member
join:2000-10-18
PorkRoll NJ
·Optimum Online
(Software) pfSense
Netgear WAX630

Pureblood

Premium Member

RE: Backdoor D-Link Routers

I had two of their DIR-655 routers, the second was the replacement of the first and both turned out to be huge failures. After 3 -5 days the D-Link firmware would repeatedly lockup. And if that wasn’t enough I purchased a D-Link Ethernet switch and that failed only after a few months of service. Ultimately I ended up with a $60 TP-Link N router and flashed it with dd-wrt. The TP-Link has been up for just about three years and no problems whatsoever. I would suggest to the folks that have D-Link routers to go to the dd-wrt router-database and see if your device supports dd-wrt and use the suggested build of dd-wrt. Then learn how to install it,do the 30/30/30 reset, flash the router, reset again and configure it and then forget about it. D-Link’s firmware should be ranked amongst the worst.

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN

Member

Re: Backdoor D-Link Routers

I've never had any problems with my DIR-655. Maybe you should try this and see if it helps any: »forums.dlink.com/index.p ··· =54498.0 Post if you want more help. D-Link FW works very well for others. Other variables can cause router problems, not just FW.

Pureblood
'Let's Go Brandon'
Premium Member
join:2000-10-18
PorkRoll NJ
·Optimum Online
(Software) pfSense
Netgear WAX630

Pureblood

Premium Member

said by BimmerE38FN:

I've never had any problems with my DIR-655. Maybe you should try this and see if it helps any: »forums.dlink.com/index.p ··· =54498.0 Post if you want more help. D-Link FW works very well for others. Other variables can cause router problems, not just FW.

Thanks but not interested. The ONLY way I’d ever go back to a D-Link router is if my router failed and I received a great deal on a DLink router that was compatible with dd-wrt or tomato. D-Link firmware was an epic failure here TWICE so no reason to go back, plus I like and some of the advanced features not found in retail routers

BimmerE38FN
join:2002-09-15
Boise, ID

BimmerE38FN to Pureblood

Member

to Pureblood

Re: RE: Backdoor D-Link Routers

Kewl, Good Luck.