RE: Unknown Port at LevelOne WBR3460B

["John Babio" <jbabio () po-box esu edu>]

If it wasn't a port forward setup by you, is there a section for remote admin capabilities?

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Jan Germann
Sent: Wednesday, October 14, 2009 7:22 PM
To: pen-test () securityfocus com
Subject: Unknown Port at LevelOne WBR3460B

Hi,

im currently trying to audit a router, my router.

Generaly this router should only have one port open, port 80.
But there is also the port 32764. So I googled and didnt found anything
usefull about it neither about the port in context of the router nor
about the port in generally.

nc gives me the following data in plaintext:
MMcS▒▒▒▒

In Hex its:
4d4d6353ffffffff

It first needs a challenge and then returns these strange string. I know
from nmap its an embedded linux 2.4.9 - 2.4.18 but that doesnt help me
anyways.

I seriously dont know what to do with it and how to handle this. The
vendor doesnt give me any information about that.

Does anyone knows something more or has an idea for me how to proceede?

Greetings

J


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------