Plugin ID | 289 |
Plugin name | Nortel Networks router telnet user level without password |
Plugin filename | Nortel Networks router telnet user level without password.plugin |
Plugin filesize | 2233 bytes |
Plugin family | Network Devices |
Plugin created name | Marc Ruef |
Plugin created email | marc.ruef at computec.ch |
Plugin created web | http://www.computec.ch |
Plugin created company | computec.ch |
Plugin created date | 2005/01/04 |
Plugin version | 1.0 |
Plugin protocol | tcp |
Plugin port | 23 |
Plugin procedure exploit | open|sleep|send User\n|sleep|close|pattern_exists $ |
Plugin exploit accuracy | 98 |
Plugin comment | The NASL script is Copyright (C) 2000 Victor Kirhenshtein |
Bug produced name | Nortel Networks |
Bug affected | Nortel Networks router |
Bug not affected | Other solutions |
Bug vulnerability class | Configuration |
Bug description | The remote Nortel Networks (former Bay Networks) router has no password for user account. An attacker could telnet to the router and reconfigure it to lock you out of it, and to prevent you to use your internet connection. |
Bug solution | telnet to this router and set a password immediately. |
Bug fixing time | Approx. 20 minutes |
Bug exploit availability | Yes |
Bug remote | Yes |
Bug local | Maybe |
Bug severity | Medium |
Bug popularity | 7 |
Bug simplicity | 7 |
Bug impact | 8 |
Bug risk | 7 |
Bug Nessus risk | Medium |
Bug check tools | Nessus can check this flaw with the plugin 10529 (Nortel Networks passwordless router (user level)). |
Source Nessus ID | 10529 |
Source Literature | Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427 |
Source Misc. | http://www.computec.ch |