Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 58 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Vulnerability Remediation help
EH-Net
May 22, 2013, 09:19:42 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Vulnerability Remediation help  (Read 6667 times)
0 Members and 1 Guest are viewing this topic.
SephStorm
Hero Member
*****
Offline Offline

Posts: 530


View Profile WWW
« on: February 10, 2011, 08:23:47 AM »

I decided to include one of my routers in my vulnerability scan, I dont know why I didnt think of it earlier... Anyway, it came up with approx 5 vulnerabilities. Now this is a commercial Netgear WGR614v10 router. The scanner detected the OS as Linux, but I am not aware of any way to communicate with the OS outside of the GUI web interface. So how can I re-mediate these vulnerabilities? There is no firmware update available for the device.

I considered trying to load DD-WRT on another device I had at one point but I am unfamiliar with it.. looking at the DDWRT site, it is in progress for v9 of the firmware for this device, I have no idea how well the list or the project is maintained.
Logged

cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #1 on: February 10, 2011, 09:33:54 AM »

Do you have additional information on the 5 vulns it found? I've only found 2 DOS issues that that device has in regards to the web interface. The DOS may only be that which would be a nuisance on a home network but obviously more of an issue on a business network. Keep in mind that a DOS may actually be more than that, it could be that the researcher just didn't do enough work to get code execution and stopped at the DOS.

If there are no firmware updates for that device then you wont be able to remediate those vulns. However, you can mitigate your risk by making sure that the web interface is not exposed externally or using a different OS on the device like you mentioned. DD-WRT is actively maintained but like anything else, has its own issues:

http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=dd-wrt&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=

If I were you... I'd try to bust into that thing and see for yourself how big of a risk those vulns are!
Logged

SephStorm
Hero Member
*****
Offline Offline

Posts: 530


View Profile WWW
« Reply #2 on: February 11, 2011, 08:21:07 PM »

The vulnerabilities were a TCP Sequence number Approximation vulnerability CVE-2004-0230

2 instances of Nameserver Processes Recursive Queries

ICMP timestamp response cve 1999-0524

and unencrypted telnet service available

The only one I am familiar with is the Timestamp vulnerability, having remediated it on my PC previously. I attempted to telnet to the device, but didnt have  any luck, the connection appeared to be established but I didnt receive any data on the terminal emulator.
Logged

cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #3 on: February 12, 2011, 11:44:58 PM »

If this is on your home network, on the LAN side then don't worry about those. If you're not using telnet to your router then turn that service off. Rule of thumb....turn everything off and then only turn on stuff you need.

If this was from the outside in, you'd have some issues but these are minuscule compared to other issues you may encounter on your network, IE bad wifi security, poor client security/patching etc etc etc.....

Logged

SephStorm
Hero Member
*****
Offline Offline

Posts: 530


View Profile WWW
« Reply #4 on: February 14, 2011, 01:20:05 AM »

Ok.

I do have other routers available if I felt it was an unnecessary risk. Supposedly that is what security is about, risk management. Heck, give me a shell prompt any day...
Logged

cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #5 on: February 14, 2011, 07:55:42 AM »

It certainly is. There may be a vulnerability, but if there is no measurable threat, then you have no risk so you're probably better off focusing on other issues.
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.052 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.