Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Bugtraq: Re: Linksys phone adapter denial of service

Re: Linksys phone adapter denial of service

From: J. Oquendo <sil_at_infiltrated.net>
Date: Mon, 24 Mar 2008 12:53:00 -0400

orsino wrote:
> There's a difference between being able to get onto a network (via wifi
> maybe?) and getting physical access to a device.

For starters this is a VoIP device (Product Name: SPA-2102), but even
if it weren't it makes no difference to me and in the security realm it
shouldn't make a difference to anyone else either.

1) I don't have an open network and if you do and are on this list its
either going to be a honeypot or for theft of information (bad guys roam
this list too)

2) Think about how insanely stupid it would be to "go on a live network"
then ping a VoIP device offline. What does this accomplish other then
pure stupidity.

3) Where is the vendor contact information. Was this meant to be posted
to Bugtrag or Fool Disclosure?

-- 
====================================================
J. Oquendo
SGFA #579 (FW+VPN v4.1)
SGFE #574 (FW+VPN v4.1)
wget -qO - www.infiltrated.net/sig|perl
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x3AC173DB

Received on Mar 24 2008
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]