Nmap Hackers: Fingerprint for FlowPoint/2200 SDSL

["Frank W. Keeney" <FKeeney () hsa com>]

Fingerprint for FlowPoint/2200 SDSL [ATM] Router v1.4.5


TSeq(Class=TD%gcd=1%SI=4)
TSeq(Class=TD%gcd=1%SI=2)
TSeq(Class=TD%gcd=1%SI=3)
T1(Resp=Y%DF=N%W=1000%ACK=S++%Flags=AS%Ops=M)
T2(Resp=N)
T3(Resp=Y%DF=N%W=1000%ACK=S++%Flags=AS%Ops=M)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=15C%RID=E%RIPCK=F%UCK=0%ULEN=134%DAT
=E)


This is the router used at customer locations for Covad and Northpoint's
xDSL services. It was installed in my home yesterday. Anyone can telnet
in without a password and gather a great amount of information. I cannot
find a way to disable telnet or log access attempts. Configuration
changes require a password.




+++++++++++++++++++++++++++++++++++++++++++++++++++++++
Frank Keeney, Network Services, Home Savings of America
+1 626-814-5080 mailto:fkeeney () hsa com
+++++++++++++++++++++++++++++++++++++++++++++++++++++++