Bugtraq: Re: SMC Routers have remote administration enabled by default

[user86 <user86 () earthlink net>]

On Thursday 29 April 2004 01:10, user86 wrote:
> On Wednesday 28 April 2004 12:55, user86 wrote:
> > There are two workarounds:
> > 1.  Enable the router's firewall in its "Advanced Setup"
> >
> > 2.  Forward port 1900 of the router to a non-existent internal IP address
> > (such as 192.168.2.248 if it isn't in use).
> A third workaround on the 7008ABR with firmware 1.032 is to go into the
> router's "Advanced Setup" click "System" then "Remote Management" and click
> "Apply" (even without changing any setting) and port 1900 then closes
> itself.
Ugh!  Scratch that third workaround!  I just found out that that third 
workaround only works as long as the router stays up.  If the router is 
rebooted for *any* reason, such as during a power outage or by the user 
through the web interface, port 1900 is open again when the router boots back 
up!