Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: NETGEAR DG834G SPECIAL FEATURES
From: "Uday Moorjani" <umoorjani () wanadoo fr>
Date: Fri, 13 Aug 2004 10:24:55 -0400

Dear Sir,

But in order to have access to setup.cgi you need to bypass the .htaccess
protection.
I've tried it on my DG834G and it requires me to enter the .htaccess
password.

Uday K. MOORJANI

----- Original Message ----- 
From: <thanasonic () hack gr>
To: <bugtraq () securityfocus com>
Sent: Thursday, August 12, 2004 1:39 PM
Subject: NETGEAR DG834G SPECIAL FEATURES




By opening http://192.168.0.1/setup.cgi?todo=debug you enable the router's
debug mode.Then you just telnet at 192.168.0.1 at port 23 and then you have
a root shell.

Also i found that if you just telnet to 192.168.0.1 2602 you will get a
prompt from the service ZEBRA that is running on the router.By giving
"zebra" as password *which is the default password* you got also a root
shell.



---
avast! Antivirus: Inbound message clean.
Virus Database (VPS): 0433-2, 10/08/2004
Tested on: 13/08/2004 09:30:54
avast! is copyright (c) 2000-2003 ALWIL Software.
http://www.avast.com







---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0433-2, 10/08/2004
Tested on: 13/08/2004 10:24:56
avast! is copyright (c) 2000-2003 ALWIL Software.
http://www.avast.com




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]