Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Equipment Support » Hardware By Brand » 2Wire » DNS Hijack on 2wire routers?
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
2701HG-B Frequent loss of Internet light, and now rebooting »
« Block MSN Messenger in the company  

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:
·magicjack.com
·AT&T U-Verse
·Comcast
·AT&T Midwest
·HughesNet Satellit..


3 edits

Re: AT&T claims this is fixed???

I'm running in the BETA pool 4.25.19 on a 1000HG

Exploit 1 brings up the "Page not Found" screen.
Exploit 2 brings up the "Enter the Password" Screen.

If your passwords were set to "admin", you'd definitely have a problem on your hands, and as for the first one if you have no password set, You might have an issue as this SETS your password to whatever the attacker wants. He's then free to run exploit #2 assuming that the host site used is ready for the embed.

I recommend that everyone who uses a vulnerable 2Wire SET A SYSTEM PASSWORD other than "admin". I use 5 letters & 5 Numbers caps & lowercase, no spaces or characters is ok.

no_fix_4U

@sbcglobal.net

Re: AT&T claims this is fixed???

said by ctceo See Profile :

I'm running in the BETA pool 4.25.19 on a 1000HG

Exploit 1 brings up the "Page not Found" screen.
Exploit 2 brings up the "Enter the Password" Screen.

If your passwords were set to "admin", you'd definitely have a problem on your hands
So it sounds like there's a fixed beta 4.25.19 out there, or perhaps you have the UI hotfix that was mentioned. How did you get your beta version? My 4.25.19 is still vulnerable:

For me, the exploit works regardless of the password I have set. I've always had a strong password (8 characters, with numbers/punctuation), but the first exploit resets the password to "admin".

Apparently AT&T has not deployed the hotfix to me. Wish I could get updated - my 1701HG always tells me I have the latest version.

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:
·magicjack.com
·AT&T U-Verse
·Comcast
·AT&T Midwest
·HughesNet Satellit..

Re: AT&T claims this is fixed???

I've been on several hundred BETA lists in the last 15 years, Games, Hardware, Software, MMO's, and I actually have to turn down some that I otherwise would love to participate in. As for the 2Wire, I was chosen based on a questionaire that I got when I subscribed for at&t DSL back in early 2000. Since then I've had the pleasure of being part of the test groups. For a couple models and about 2 or 3 firmwares, Including the latest 4.25.19 .

They've been hush hush about the vulnerability, so I'm sure based on that and my experience with other earlier problems that the hardware had, they're working on it. Due to that pretty pink sheet of paper that I have labeled Non-Disclosure Agreement blah blah, blah blah; in BOLD and UNDERLINE, I cannot comment any further.

yes_fix_4u

@sbcglobal.net

It's a hotfix, not a firmware change. I have U-verse and they first pushed out a hotfix then they updated the firmware fixing some other things. look at your MDC page: »home/mdc at the bottom of the System Settings page and look for hotfix or uihotfix. My brother has normal adsl and he has the patch and I believe it says hotfix. Oh, he has a 2701(?) and the firmware didn't change, just a component was added.

»New Firmware for 3800 Series

no_fix_4me

@sbcglobal.net

U-verse isn't the universe

Ok, I understand that on a 2Wire forum, some fanboys will come out in defense, but it's foolish to claim that everything's hunky-dory because a very small subset - U-verse and a select few others - have the hotfix.

Yes, I've checked the MDC. I don't have the hotfix, my mother doesn't have it, and the neighbors I've checked with don't have it. Therefore a reasonable conclusion is that a large number of AT&T users remain unpatched.

I'm happy for you U-verse customers who have the fix, but the reality is that U-verse is new and represents the minority of users.

jr9730

join:2000-11-22
Torrance, CA

Re: U-verse isn't the universe

What version gateway do you have? The fix has hit a majority of ATT users at this time?

no_fix_4me

@sbcglobal.net

Re: U-verse isn't the universe

See above - from me and others who haven't been updated.

jr9730

join:2000-11-22
Torrance, CA

Re: U-verse isn't the universe

All older gateways should be almost done now too I think - send me a message and dont be anon so we can commuicate with you..
Forums » Equipment Support » Hardware By Brand » 2Wire2701HG-B Frequent loss of Internet light, and now rebooting »
« Block MSN Messenger in the company  


Wednesday, 02-Dec 15:35:17 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [159] Comcast Releasing Promised Usage Meter
· [79] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [77] Latest Consumer Reports Survey Not Kind To AT&T
· [69] Baltimore To Ban Lazy Cable Installs
· [60] Broadband Killed The Game Console
· [54] Rogers Unveils The ISP Dream Model
· [46] ACTA: Global Three Strikes
· [41] Rural Carriers Quickly Embracing Fiber
· [38] Charter Exits Chapter 11
· [33] AT&T Top Lobbyist Cicconi Has His Feelings Hurt
Most people now reading
· A little freaky, not sure if its legit. [Spam, Scam and Phishbusters]
· MS admits Windows Updates principally created to annoy [Security]
· Am I the only one that loves to work in IT? [No, I Will Not Fix Your #@$!! Computer]
· [Business] how to bridge a smc 8014 business class modem [Comcast HSI]
· DK Weapon Upgrade [World of Warcraft]
· Quality/longevity of 15A 120V receptacles [Home Repair & Improvement]
· PVP in wow today [World of Warcraft]
· cleaning LCD [General Questions]
· UBB round 2 at the CRTC [Canadian Broadband]
· Using AirMax to provide triple play services? [Wireless Service Providers]