Fritzbox buffer overflow

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Fritzbox buffer overflow

Noodles

487 posts

Ultimate Geek
+1 received by user: 95

#190676 8-Jan-2016 14:25

https://www.exploit-db.com/exploits/39194/

Not sure if this is a remote vulnerability or not, but probably a good time to update your software

sidefx

3775 posts

Uber Geek
+1 received by user: 1295

Trusted

#1465938 8-Jan-2016 14:51

Does 2 degrees support versions > 6.30 though?

"I was born not knowing and have had only a little time to change that here and there." | Octopus Energy | Sharesies
- Richard Feynman

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#1465940 8-Jan-2016 14:57

atleast this isnt exploitable by an outwards facing service, but still a fair bit concerning.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Jiriteach

1139 posts

Uber Geek
+1 received by user: 373

ID Verified

Trusted

Lifetime subscriber

#1465951 8-Jan-2016 15:15

sidefx: Does 2 degrees support versions > 6.30 though?

Affected Versions: versions prior to 6.30 (all models) [0]

Fixed Versions: >= 6.30 (all models) [0]

6.30 is now support on 2degrees so updating to thats is OK. 6.50 is out but not for international as yet as most likely won't be supported for a while.

Cheers

-- opinions expressed by me are solely my own. ie - personal

2degreesCare

1537 posts

Uber Geek
+1 received by user: 274

Trusted

2degrees

#1465953 8-Jan-2016 15:24

Hi all,

We are aware of this, in fact we have been working alongside the team at AVM to help rectify this problem throughout last year.

As the report mentions, firmware versions 06.30 and higher prevents this exploit from being created. The majority of devices on our network have upgraded to this version automatically through the manufacturer. There are no compatibility issues between these firmware versions and our network. We recommend upgrading firmware if you are not already on the latest version for your device, and we are investigating further measures we can take in the short term to ensure remaining outdated devices are on the latest firmware.

Feel free to let us know via PM if you have any further specific concerns.

Thanks

Ralph ^JOB

Oncop53

273 posts

Ultimate Geek
+1 received by user: 24

#1466085 8-Jan-2016 17:30

OK thanks, updated. I have been waiting for the OK by 2degrees on this.