[36127] in bugtraq
Re: NETGEAR DG834G SPECIAL FEATURES
daemon@ATHENA.MIT.EDU (Dave Paris)
Sat Aug 14 02:03:07 2004
Message-ID: <411CF628.7010502@w3works.com>
Date: Fri, 13 Aug 2004 13:11:04 -0400
From: Dave Paris <dparis@w3works.com>
MIME-Version: 1.0
To: bugtraq@securityfocus.com
In-Reply-To: <20040813165125.29276.qmail@www.securityfocus.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
The Zebra issue is simply a default password/default configuration
issue. The documentation _clearly_ states that is should be changed and
than an 'enable password' be applied. In neither case does this allow
any "exploit" to take place, as you're restricted to the Zebra process
and not the OS.
It's no more of an exploit than Oracle's system/manager,
sys/change_on_install, or scott/tiger username/password combinations
that are installed by default.
Kind Regards,
-dsp
thanasonic@hack.gr wrote:
> In-Reply-To: <005e01c48141$4e82f880$0701a8c0@COOKIE>
>
> Sorry for not mentioning that.Thats why the subject is called "SPECIAL FEATURE" and not a bug.
> By the way, the second issue about zebra its true and as i informed about it ,it can be exploited localy or remotely.
>
> Thanks for your reply,
> Thanasonic
>
>
