Bugtraq: Re: Motorola Cable Modem DOS

[Juraj Ziegler <e () hq sk>]

On Wed, Oct 30, 2002 at 02:02:27PM -0600, Ryan Sweat wrote:
> I've found it trivial to crash the Motorola Surfboard 4200 Cable modem,
> as installed default by AT&T Broadband Internet.
>
> The modem acts as a bridge, but also has an internal RFC1918 IP address
> (192.168.100.1).  Simply  nmap'ing the cable user's IP address, ie:
> # nmap -sS -p 1-1024 12.x.x.x
> will cause it to crash, rendering the ethernet interface useless.  It is
> also possible to crash it from the lan by simply doing the same scan
> against the cable modem's internal IP address.  The crash is not
> specific to nmap, there are other publicly available tools which cause
> the same result.  This is known to be effective on Software Version:
> SB4200-0.4.4.0-SCM06-NOSH. (possibly others?)
Nothing happens to a SB4200E-0.4.4.1-SCM04-NOSH. Everything works fine
after a scan.

[e]

-- 
_______________________________________________________________________________
> e () hq sk<                   /(bb|[^b]{2})/                 >http://hq.sk/~euro<
    "Programming today is a race between software engineers striving to
    build bigger and better idiot-proof programs, and the Universe trying
    to produce bigger and better idiots. So far, the Universe is winning."
                                                                    -- Rich Cook

Attachment: _bin
Description: