Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Thomson TCW690 Denial Of Service Vulnerability
From: MurDoK <murdok.lnx () gmail com>
Date: Sat, 19 Feb 2005 10:43:44 +0100

I found a vulnerability in this cablemodem which a malicious user inside *LAN 
can reset it easily. 
This cablemodem model is given by the spanish ISP "AUNA". 
Product: Thomson TCW690 cablemodem 
Affected Version: ST42.03.0a (possible others)
Immune Version: ??? 
Security-Risk: high 
Exploit: yes 
Vendor-URL: http://www.thomson.net/ 
Vendor-Status: informed but no response 
The http server inside this cablemodem doesn't check the length of GET 
requests. If you exploit this bug the router will become unstable for ~50 
No code needed. Just open your browser to[about 2000 A's]AAA  
No response from vendor. There isn't fix available.  
Vendor Status 
2005.02.07 - Bug found. 
2005.02.07 - Informed the vendor broadband () thomson net, no response. 
2005.02.11 - Informed the vendor webmaster () thomson net  
2005.02.19 - Public disclosure. 
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]