DoS Exploit in Eicon Diehl LAN ISDN Modem

Björn Stickler (courierONLINE.DE)
Sun, 26 Sep 1999 12:53:26 +0200

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Mark Jeftovic: "Re: More fun with WWWBoard"
• Previous message: Shane Hird: "Several ActiveX Buffer Overruns"

i recently found a security bug in the diva lan isdn modem that shuts down
the modem (fault led on).
all you have to do is type the following location in your browser:
http://diva/login.htm?password=0123456789012345678901234567890123456789
where diva is the name of your modem or the ip-address.
after that, the modem is locked until you do a hard reset.
i think it´s a buffer overflow of the password length which probably
overwrites the eip adress.
regards
Björn Stickler

PS: i informed Eicon Diehl about that bug already

• Next message: Mark Jeftovic: "Re: More fun with WWWBoard"
• Previous message: Shane Hird: "Several ActiveX Buffer Overruns"

This archive was generated by hypermail 2.0b3 on Mon Sep 27 1999 - 13:11:40 CDT