Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


11 posts

Geek
+1 received by user: 1


Topic # 9036 15-Aug-2006 08:45
Send private message

I just read at this site: http://www.securiteam.com/securitynews/5FP020KJGU.html about a serious security flaw in the D-Link Router to do with UPNP Stack Overflow. Does any one know if the XTRA modems are affected?

Create new topic
362 posts

Ultimate Geek

Trusted

  Reply # 43977 15-Aug-2006 09:56
Send private message

i think the standard Xtra modem is the Dlink 302G, not on that list.

643 posts

Ultimate Geek


  Reply # 44011 15-Aug-2006 16:10

XTRA modems not on the list are potentially (but not certainly) affected by this, if they feature a UPNP gateway server. D-link use similar firmware on many of thier products.

I reccomend turning off UPNP whether or not your router is vulnerable to this partuclar exploit as UPNP inherits security concerns regardless of implementation.




Sniffing the glue holding the Internet together

425 posts

Ultimate Geek


  Reply # 44012 15-Aug-2006 16:12
Send private message

I have a D-Link DI-524 router, but the one that they sell in NZ is revision B, which is not on the vulnerable list, although there is a firmware upgrade dated December 2005 on D-Link's Australian web-site that fixes a few bugs.


836 posts

Ultimate Geek

Trusted

  Reply # 44028 15-Aug-2006 18:30
Send private message

UPnP shouldnt be listening on the WAN interface anyhow so the options are that somebody already has physical access to your LAN via cabling (in which case you probably have bigger problems than this) or your WLAN is not secured/you're using WEP in which case you're probably an idiot and won't be reading this in the first place ;)

3888 posts

Uber Geek
+1 received by user: 163


  Reply # 44061 15-Aug-2006 23:03
Send private message

Fraktul: UPnP shouldnt be listening on the WAN interface anyhow so the options are that somebody already has physical access to your LAN via cabling (in which case you probably have bigger problems than this) or your WLAN is not secured/you're using WEP in which case you're probably an idiot and won't be reading this in the first place ;)


...or you're like those of us who see this whole security space as an empaire builders dream and a way for IT people to drain your walet of money for a problem that they're perpetuating.

Cheers Don




Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


573 posts

Ultimate Geek
+1 received by user: 8


  Reply # 44080 16-Aug-2006 09:30
Send private message

That's a bit of a pessimistic view isn't it Don?  The same could equally be said for any other industry including Cars. Cars have bugs that are identified, they break down and require repairs/patches to fix, and they get broken into and stolen, etc.

Mechanics (and lawyers, and accountants, and all of the other trades) are also equally adept at draining our wallets.

Jp.




Working for Service Plus - www.serviceplus.co.nz

Authorised Service Agent for Apple, BenQ, Navman, Sony, and Toshiba - warranty & non-warranty repairs.

836 posts

Ultimate Geek

Trusted

  Reply # 44094 16-Aug-2006 11:46
Send private message

Very true, but if my car had as many saftey advisories as my software I would be walking :)

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Targus set sights on enterprise and consumer growth in New Zealand
Posted 13-Aug-2018 13:47


Huawei to distribute nova 3i in New Zealand
Posted 9-Aug-2018 16:23


Home robot Vector to be available in New Zealand stores
Posted 9-Aug-2018 14:47


Panasonic announces new 2018 OLED TV line up
Posted 7-Aug-2018 16:38


Kordia completes first live 4K TV broadcast
Posted 1-Aug-2018 13:00


Schools get safer and smarter internet with Managed Network Upgrade
Posted 30-Jul-2018 20:01


DNC wants a safer .nz in the coming year
Posted 26-Jul-2018 16:08


Auldhouse becomes an AWS Authorised Training Delivery Partner in New Zealand
Posted 26-Jul-2018 15:55


Rakuten Kobo launches Kobo Clara HD entry level reader
Posted 26-Jul-2018 15:44


Kiwi team reaches semi-finals at the Microsoft Imagine Cup
Posted 26-Jul-2018 15:38


KidsCan App to Help Kiwi Children in Need
Posted 26-Jul-2018 15:32


FUJIFILM announces new high-performance lenses
Posted 24-Jul-2018 14:57


New FUJIFILM XF10 introduces square mode for Instagram sharing
Posted 24-Jul-2018 14:44


OPPO brings advanced technology to the smartphone market with new device
Posted 24-Jul-2018 09:20


Hawaiki Transpacific cable ready-for-service
Posted 20-Jul-2018 11:29



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.