Plugin ID | 300 |
Plugin name | Alcatel ADSL Modem without password |
Plugin filename | Alcatel ADSL Modem without password.plugin |
Plugin filesize | 2142 bytes |
Plugin family | Network Devices |
Plugin created name | Marc Ruef |
Plugin created email | marc.ruef at computec.ch |
Plugin created web | http://www.computec.ch |
Plugin created company | computec.ch |
Plugin created date | 2005/01/04 |
Plugin version | 1.0 |
Plugin protocol | tcp |
Plugin port | 23 |
Plugin procedure exploit | open|sleep|send \n|sleep|close|pattern_exists ALCATEL ADSL |
Plugin exploit accuracy | 98 |
Plugin comment | The NASL script is Copyright (C) 2000 Renaud Deraison |
Bug produced name | Alcatel |
Bug affected | Alcatel ADSL Modem |
Bug not affected | Other solutions |
Bug vulnerability class | Configuration |
Bug description | The remote Alcatel ADSL modem has no password set. An attacker could telnet to this modem and reconfigure it to lock you out. This could prevent you from using your Internet connection. |
Bug solution | Telnet to this modem and set a password immediately. |
Bug fixing time | Approx. 20 minutes |
Bug exploit availability | Yes |
Bug remote | Yes |
Bug local | Maybe |
Bug severity | High |
Bug popularity | 9 |
Bug simplicity | 8 |
Bug impact | 9 |
Bug risk | 8 |
Bug Nessus risk | High |
Bug check tools | Nessus can check this flaw with the plugin 10530 (Passwordless Alcatel ADSL Modem). |
Source Nessus ID | 10530 |
Source Literature | Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427 |
Source Misc. | http://www.computec.ch |