| reply to jdong
Re: Open-source firmware flaw exposes wireless routers - DD-WRT Even though it affects DD-WRT, this exploit is not applicable to Tomato. Just in case anyone was wondering as I did. |
|
|
|
FickeyTerrorists target your resolve
join:2004-05-31
1 edit | said by KodiacZiller:Even though it affects DD-WRT, this exploit is not applicable to Tomato. Just in case anyone was wondering as I did. Can you substantiate/elaborate on Tomato's immunity to this exploit? Is it just that HyperWRT isn't vulnerable?
--
Nationalized healthcare? Name one government entity that isn't rife with bureaucratic waste & inefficiency! |
|
2 edits | said by Fickey:said by KodiacZiller:Even though it affects DD-WRT, this exploit is not applicable to Tomato. Just in case anyone was wondering as I did. Can you substantiate/elaborate on Tomato's immunity to this exploit? Is it just that HyperWRT isn't vulnerable? The Tomato forums has a thread about this, and both responses said Tomato is not affected. Apparently there were xss protections implemented in Tomato 1.14.
»www.linksysinfo.org/forums/showt···st349423
Polarcloud appears to have pulled Tomato, so I'm not confident that Tomato isn't also effected. Anyone heard any response from them What do you mean they "pulled it?" I am on the page right now and I see both v 1.24 and 1.25 for download.
EDIT: Hmm, it seems you're right. I went to the source forge page to update my old v1.23 and it seems I am getting an error when attempting to download v1.25. However, this doesn't mean it has been "pulled." Could be a server error or what not. |
|
KoRnGtL15Premium
join:2007-01-04
Grants Pass, OR | When you go to dl a firmware file it will not work. That's why he said it might have been pulled as a safe guard until more information was known. |
|
| According to the DD-WRT website:
quote:
Note: The exploit can only be used from outside your network over the internet if you have enabled remote Web GUI management in the Administration tab. As immediate action please disable the remote Web GUI management.
From this one can surmise that if you do not use remote web GUI management on Tomato, then Tomato would also be "immune." |
|
| Does this statement from DD-WRT jive with what we know? |
|
