Plugin ID | 284 |
Plugin name | Nortel Networks router telnet manager level without password |
Plugin filename | Nortel Networks router telnet manager level without password.plugin |
Plugin filesize | 2252 bytes |
Plugin family | Network Devices |
Plugin created name | Marc Ruef |
Plugin created email | marc.ruef at computec.ch |
Plugin created web | http://www.computec.ch |
Plugin created company | computec.ch |
Plugin created date | 2005/01/02 |
Plugin version | 1.0 |
Plugin protocol | tcp |
Plugin port | 23 |
Plugin procedure exploit | open|sleep|send Manager\n|sleep|close|pattern_exists $ |
Plugin exploit accuracy | 98 |
Plugin comment | The NASL script is Copyright (C) 2000 Victor Kirhenshtein |
Bug produced name | Nortel Networks |
Bug affected | Nortel Networks |
Bug not affected | Other solutions |
Bug vulnerability class | Weak Authentication |
Bug description | The remote Nortel Networks (former Bay Networks) router has no password for the manager account. An attacker could telnet to the router and reconfigure it to lock you out of it. This could prevent you from using your Internet connection. |
Bug solution | telnet to this router and set a password immediately. |
Bug fixing time | Approx. 10 minutes |
Bug exploit availability | Yes |
Bug remote | Yes |
Bug local | Maybe |
Bug severity | High |
Bug popularity | 8 |
Bug simplicity | 8 |
Bug impact | 9 |
Bug risk | 8 |
Bug Nessus risk | High |
Bug check tools | Nessus can check this flaw with the plugin 10528 (Nortel Networks passwordless router (manager level)). |
Source Nessus ID | 10528 |
Source Literature | Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427 |
Source Misc. | http://www.computec.ch |