Post #158,679
6/6/04 8:57:46 PM
|
OK, you Linksys Router/Firewall owners, we have a problem.
[link|http://www.securiteam.com/exploits/5DP0A20CVC.html|Linksys BOOTP Memory Leak]. A remote proof of concept exploit for various Linksys routers that have flaws in the way they return BOOTP packets. In each legitimate response, BOOTP fields are filled in with portions of memory from the device, allowing a remote attacker to sniff traffic and crash the device. Linksys (now owned by Cisco) is responding, but so far [link|http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_created=1086294093&p_sid=1UR2Zfdh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9JnBfcm93X2NudD02NTQmcF9wYWdlPTE*&p_li=|only for version 3 of BEFSR41]. The other versions will have fixes "soon". I have an early version, probably version 1, of the unit. Alex
Honor has not to be won; it must only not be lost. -- Arthur Schopenhauer (1788-1860), German philosopher
|
Post #158,905
6/7/04 8:49:37 PM
|
Firmware update now available for early BEFSR41s.
[link|http://www.linksys.com/download/firmware.asp|Linksys]. The only install tool is for Windows however.
Alex
Honor has not to be won; it must only not be lost. -- Arthur Schopenhauer (1788-1860), German philosopher
|
Post #158,993
6/8/04 11:09:22 AM
|
Ugh.
I need the update. Unfortunately I don't have Windows anywhere in the house.
Suggestions?
Ben
To deny the indirect purchaser, who in this case is the ultimate purchaser, the right to seek relief from unlawful conduct, would essentially remove the word consumer from the Consumer Protection Act
- [link|http://www.techworld.com/opsys/news/index.cfm?NewsID=1246&Page=1&pagePos=20|Nebraska Supreme Court]
|
Post #158,994
6/8/04 11:12:59 AM
|
gawd
No TV and no Windows. What are you, some kind of Communist? :)
-drl
|
Post #158,998
6/8/04 11:28:52 AM
|
I have a TV now
I don't watch it though...
Cheers,
Ben
To deny the indirect purchaser, who in this case is the ultimate purchaser, the right to seek relief from unlawful conduct, would essentially remove the word consumer from the Consumer Protection Act
- [link|http://www.techworld.com/opsys/news/index.cfm?NewsID=1246&Page=1&pagePos=20|Nebraska Supreme Court]
|
Post #159,000
6/8/04 11:34:47 AM
|
No windows?
Live in a sub-basement? No sun-light.
|
Post #159,003
6/8/04 11:39:48 AM
|
Have a trout. In the face. Repeatedly.
To deny the indirect purchaser, who in this case is the ultimate purchaser, the right to seek relief from unlawful conduct, would essentially remove the word consumer from the Consumer Protection Act
- [link|http://www.techworld.com/opsys/news/index.cfm?NewsID=1246&Page=1&pagePos=20|Nebraska Supreme Court]
|
Post #159,012
6/8/04 12:49:51 PM
|
Stop re-inventing the wheel ... use IFS
===
Implicitly condoning stupidity since 2001.
|
Post #159,037
6/8/04 2:45:52 PM
6/8/04 2:46:05 PM
|
I'll happily deliver YOU an IFS
Use the right tool for the job.
I considered an IFS for the original post, and decided against it. Didn't fit the amount that I was humored by what I was replying to.
Now you, by contrast, actually irritated me...
Cheers,
Ben
To deny the indirect purchaser, who in this case is the ultimate purchaser, the right to seek relief from unlawful conduct, would essentially remove the word consumer from the Consumer Protection Act
- [link|http://www.techworld.com/opsys/news/index.cfm?NewsID=1246&Page=1&pagePos=20|Nebraska Supreme Court]
Edited by ben_tilly
June 8, 2004, 02:46:05 PM EDT
|
Post #159,068
6/8/04 5:03:22 PM
|
ooOOoo Snippy ooOOoo
Peter
[link|http://www.debian.org|Shill For Hire]
[link|http://www.kuro5hin.org|There is no K5 Cabal]
[link|http://guildenstern.dyndns.org|Blog]
|
Post #159,055
6/8/04 4:27:06 PM
|
Not the first time, I'm wrong here. There is a way!
[link|http://www.linux.org/docs/ldp/howto/Linksys-Blue-Box-Router-HOWTO/upgradingfirmware.html|HOWTO] update Linksys router.
Alex
Honor has not to be won; it must only not be lost. -- Arthur Schopenhauer (1788-1860), German philosopher
|
Post #159,117
6/8/04 9:29:06 PM
|
My BEFW11S4 has an upload page
On the "Help" tab is a link called Upgrade Firmware. Clicking it yields a page with a select file/browse input box and an Upgrade button.
It can also be upgraded using FTP
Darrell Spice, Jr. [link|http://www.spiceware.org/cgi-bin/spa.pl?album=./Artistic%20Overpass|Artistic Overpass]\n[link|http://www.spiceware.org/|SpiceWare] - We don't do Windows, it's too much of a chore
|
Post #159,248
6/9/04 3:13:21 PM
|
Be thankful you don't have this model
[link|http://www.gripe2ed.com/scoop/story/2004/6/8/102115/6914|taking away a feature during an upgrade]
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
|
