Advisory CA-2001-08

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-08 Multiple Vulnerabilities in Alcatel ADSL Modems Original release date: April 10, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Alcatel Speed Touch Home ADSL Modem...

Alcatel ADSL modems provide EXPERT administrative account with an easily reversible encrypted password

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

Alcatel ADSL modems contain a null default password

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

Alcatel ADSL modems grant unauthenticated TFTP access via Bounce Attacks

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

Alcatel ADSL modems provide unauthenticated TFTP access via physical WAN interface

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

DoS vulnerability in rp-pppoe versions <= 2.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is a denial-of-service vulnerability in rp-pppoe versions up to 2.4. rp-pppoe is a user-space PPPoE client for a bunch of UNIXes and Linux, used by many residential ADSL customers. If you use the "Clamp MSS" option and someone crafts a TCP packe...

Alcatel ADSL Modem Unpassworded Access

The remote Alcatel ADSL modem has no password set. An attacker could telnet to this modem and reconfigure it to lock you out. This could prevent you from using your Internet connection. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10530; scriptcveid"CVE-2001-1424";...

flowpoint.adsl.router.txt

Date: Tue, 13 Apr 1999 23:01:50 -0700 From: David Brumley To: [email protected] Subject: aDSL routers Welp, aDSL is here. And at least one manufacturer, flowpoint, sets no admin password. It's in the documentation, so I assume the company already knows about this vulnerability: System managers...