Slashdot Mirror
Netgear's Amusing "fix" for WG602v1 Backdoor
An anonymous reader writes "Recently Slashdot reported that the Netgear router has as WLAN backdoor. According to this report by the news service of the German publisher Heise Netgear "fixed" the problem with a firmware update. And what is the fix? According to Heise, they didn't remove the backdoor at all. Instead they just changed the login information! They replaced the old user name 'super' with 'superman', and changed the old password to '21241036'. "
Chalk up another loss for 'security by obscurity'.
dmiessler.com -- grep understanding knowledge
That would be like "fixing" Windows 95 with Windows ME.
"We need a fourth law of Robotics: Stop Fingering My Wife"
Well at least sys-admins and network engineers can finally use the login name they think they deserve.
99 bottles of beer in 175 characte
The blackhats that subscribe to
i sc losure
http://lists.netsys.com/mailman/listinfo/full-d
knew about this on irc for a while.
EU via interpol desires, and us's NSA/NRO both desire various entrypoints.
cisco's fiascos may be a trend. This netgear is only the tip of the iceberg I bet.
Unfortunately Heise (publisher of c't and iX) is the probably most clueful German publishing house when it comes to technology.
Those Netgear bozos really seem to be dumber then my cigar cutter.
The other explanation is that the equipment has such a fundamental design flaw that it can't be fixed at all. But then they act damn unresponsible.
Then again: Thanks to such blunders I know what equipment not to buy.
ich bin der musikant
mit taschenrechner in der hand
kraftwerk
That's amazing. I've got the same combination on my luggage.
"Facts are meaningless. You could use facts to prove anything that's even remotely true." - Homer Simpson
But it takes numbers + characters to make -strong- passwords. So the next logical step:
Login: Theyllneverguess
Password: cuzimso1337
___ In the words of Gen. Douglas McArthur: "I'll be right back."
I realise that this is a bit redundant, but I read the slashdot artile linked to, and what to I see but:
Re:Fixed in new firmware, available here: (Score:3, Informative)
by Chucky B. Bear (785810) on Saturday June 05, @03:10PM (#9345433)
I've just upgraded to the latest firmware. It is NOT FIXED!!!! They have simply gone and changed the username and password to something else. There is STILL a default superuser account with password.
(You can find it yourselve by just taking similiar steps as in the securityfoces article.)
Maybe reading slashdot sometimes would be a good idea.
This just isn't the way a responsible company behaves.
responsible company
Trying to put these two words together is like trying to touch two magnet ends with the same polarity.
Netgear has promptly reacted to the reports of a backdoor in the WLAN-Access-Point WG602 Version 1 with a Firmware-Update, however, the backdoor is still present, but with a new user name and password. They were a little creative with the name and extended the original character string "super" to "superman." With the password, Netgear has obviously taken the message of security seriously and changed the password to "21241036." However, to whom this telephone number points, Netgear did not comment. There, they knew nothing and initially only wanted to make themselves aware of the (details of the) problem.
Again, there is not a real updated firmware design yet. The question arises whether users are still determined--after the second patch--to get new software. In the lawyer's opinions, this problem could be reason enough to take back the device to the retailer and receive a refund of the purchase price. For now, the retailer can try to fix the shortcoming, however, the chances of that are not very good.
I'm probably at the karma cap. Mod up a funny troll instead, it lightens the mood
Well, it seems pretty obvious to me... it's supposed to be there.
This shows that it was Netgear's intention to purposely put back doors into the product. The reason "why" is not really evident. I can leave that up to the tinfoil hat crowd.
That's crap. There may be a multitude of reasons why they couldn't remove the backdoor (no access to source code, the guy who wrote it was on holiday, whatever...) but they could have at least changed the password with a hex editor to something that was difficult to type from a keyboard, low-ascii values for example.
I have an earlier Netgear product (RT314). It's actually a rebranded Zytel product, so this trick may not work on other models.
However, it was possible to edit the firmware in a binary editor. There was a checksum in the firmware, but you could fix it. You needed to connect a serial cable to the management port. When you made a change and uploaded the new firmware to the router and rebooted, the router would helpfully tell you what the old checksum was and what it expected the new checksum to be. You could then just search for the old checksum string and replace it with the new one the router calculated for you.
Pretty easy to do. And allowed you to run some of the newer Zytel firmware on the Netgear boxes.
I would have thought the link refers to the "fix" we're discussing here.
I would think under current laws that installing an undisclosed backdoor onto someone elses property would be akin to using a trojan to allow access to anothers system. Just becaujse they sell the system does not give them the right to access to it after it is sold. I can see no beneficial reason for this as most consumer routers have a hardware reset that reloads the factory defaults.
Sorry, teleporters just kill you and then make a copy. A perfect, soul-less copy.