from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 5AA66440EA
	for <jm@localhost>; Mon, 12 Aug 2002 05:50:58 -0400 (EDT)
from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Mon, 12 Aug 2002 10:50:58 +0100 (IST)
from vikki.vulnwatch.org ([199.233.98.101]) by
    dogma.slashnull.org (8.11.6/8.11.6) with SMTP id g7A01rb30740 for
    <jm@jmason.org>; Sat, 10 Aug 2002 01:01:53 +0100
(qmail 20157 invoked from network); 9 Aug 2002 22:48:11 -0000
Re: [VulnWatch] Foundstone Labs Advisory - Information Leakage in Orinoco and Compaq Access Points
From vulnwatch-return-433-jm=jmason.org@vulnwatch.org  Mon Aug 12 10:52:14 2002

On Friday, August 9, 2002, at 11:12 AM, Foundstone Labs wrote:
> An information leakage vulnerability exists in Orinoco and Compaq OEM
> access points, disclosing the unique SNMP community string. As a result,
> an attacker can query the community string and gain the ability to
> change system configuration including Wired Equivalent Privacy (WEP)
> keys and Domain Name Service (DNS) information.
I think this is missing the point a bit...  Yes, you can query the SNMP
community string...  And yes, it's the default PW (not to mention the
ESSID and last 5 characters of the default WEP key...)  But they're all
easily changed, and indeed, it is highly recommended to do so in the
manual.
Anyone who changes the default settings would not be vulnerable to this
particular SNMP probe.  Of course, you can't account for end user
stupidity, but that's beyond the scope of this advisory.  ;)
> Vendor Response:
>
> Both vendors were notified of this issue on July 8th, 2002. According
> to Orinoco, "The Residential Gateway line has been discontinued."
I've also heard (second hand, but on good authority) that the RG line is
alive and well (hence the recent RG-1100, and the upcoming 802.11a
version...)
--Rob

from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id AFDBD440F0
	for <jm@localhost>; Mon, 12 Aug 2002 05:52:41 -0400 (EDT)
from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Mon, 12 Aug 2002 10:52:41 +0100 (IST)
from cpu59.osdn.com (slashdot.org [64.28.67.73] (may be forged))
    by dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g7AE56b23523 for
    <jm-use-perl@jmason.org>; Sat, 10 Aug 2002 15:05:06 +0100
from [10.2.181.14] (helo=perl.org) by cpu59.osdn.com with smtp
    (Exim 3.35 #1 (Debian)) id 17dWp0-0003T5-00 for <jm-use-perl@jmason.org>;
    Sat, 10 Aug 2002 10:02:26 -0400
From pudge@perl.org  Mon Aug 12 10:56:08 2002