site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
AuthorAll Replies


jdong
Eat A Beaver, Save A Tree.
Premium
join:2002-07-09
Rochester, MI
kudos:1

reply to Stem Bolt

Re: Open-source firmware flaw exposes wireless routers - DD-WRT

Simplest way to test is to navigate to »router.ip/cgi-bin/;reboot

If you are vulnerable your router will reboot.
--
Ubuntu MOTU Developer and Forums Council


Millenniumle

join:2007-11-11
Fredonia, NY

I tested mine and it is vulnerable.

DD-WRT v23 SP1 Final (05/16/06) micro

I don't believe the micro gets supported, but I'll keep looking for a new version.



sivran
Back to Opera again
Premium
join:2003-09-15
Arlington, TX
kudos:1

Assuming micro has an ssh interface, you can disable http access, turn it back on when needed.



Millenniumle

join:2007-11-11
Fredonia, NY

It isn't clear to me how to use the ssh interface. I've seen instruction to use the router's administration > diagnostics window to disable the web gui, but since the diagnostics window is part of the web gui, how do I get the web gui back once it is disabled?


PittsPgh
Premium
join:2003-08-21
Pittsburgh, PA
kudos:1

reply to jdong

said by jdong:

Simplest way to test is to navigate to »router.ip/cgi-bin/;reboot

If you are vulnerable your router will reboot.
Nothing happened here with either link. Using Tomato 1.25
Using Maxthon for a browser.

This program cannot display the webpage

Paul


sivran
Back to Opera again
Premium
join:2003-09-15
Arlington, TX
kudos:1
Reviews:
·RoadRunner Cable

reply to Millenniumle

said by Millenniumle:

It isn't clear to me how to use the ssh interface. I've seen instruction to use the router's administration > diagnostics window to disable the web gui, but since the diagnostics window is part of the web gui, how do I get the web gui back once it is disabled?
Must've missed this post.

Use an ssh client (like Putty or XShell) and point it at your router's IP, port 22. Note that the username will be root, not the username you set up in the web ui.

I've posted the commands to use in previous posts.
--
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon profitable cause...


Millenniumle

join:2007-11-11
Fredonia, NY

Thank you, sivran See Profile.


Saturday, 02-Jun 19:18:41 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.
Most commented news this week
Hot Topics