republican-creole
Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   News
newer
story category Linksys WRT54GS Issue
Users reproduce Bugtraq claim
(old news - 02:13PM Tuesday Aug 16 2005)
tags: wireless · hardware · security
Users in our security forum have successfully reproduced a Linksys router flaw posted yesterday to the Bugtraq mailing list. Firmware version 4.50.6 for the Linksys WRT54GS allows wireless clients to connect without authenticating. "In other words," says Bugtraq poster Steve Scherf, "even if you think you've secured your wireless network from unauthorized access, anyone can access it. It actually shows up as having no password security on a Macstumbler scan, which is how I noticed the problem." The problem does not exist with version 4.70.6.

Related:
  1. Hacking Fon's New Router
  2. The Wi-Fi Flu
  3. Japanese Computer Scientists Crack WPA
  4. Novatel MiFi Has Some Security Issues
  5. Friday Morning Links
  6. Verizon, Skype Fix Wi-Fi Bug In 'Exclusive' Client
  7. Wi-Fi War Driving Drone Flying?
  8. Friday Evening Links
Forums » Linksys WRT54GS Issue
view: topics flat text 
Post a:

MIllIlITER
Premium
join:2002-03-03
·Sprint Mobile Broa..
·Comcast

4 edits

Sounds like an easy fix-upgrade to newer firmware

Sounds like an easy fix - upgrade to the newer 4.70.6 firmware. Problem solved. Except for those who never bother to update their firmware and bought it at the time that the offending firmware was the factory default.;)

My Web Page
Join Red Room Forum
permalink · 2005-08-16 14:10:00 · Reply to this
rusty1285

join:2005-08-16

Re: Sounds like an easy fix-upgrade to newer firmw

I just bought this router about a week ago. How do I update the firmware? I have never updated a router or anything like that before. Any explaination would be helpful.
permalink · 2005-08-16 14:32:13 · Reply to this

MIllIlITER
Premium
join:2002-03-03
·Sprint Mobile Broa..
·Comcast

1 edit

Re: Sounds like an easy fix-upgrade to newer firmw

said by rusty1285 See Profile:

I just bought this router about a week ago. How do I update the firmware? I have never updated a router or anything like that before. Any explaination would be helpful.
Try this link which gives a step by step account of how to update Linksys firmware:
»Linksys FAQ »Step-by-step how do I do a firmware update?

And if you have questions this BBR forum can give you assistance:
»Linksys
--
My Web Page
Join Red Room Forum
permalink · 2005-08-16 14:36:32 · Print · Reply to this

hayabusa3303
Over 200 mph
Premium
join:2005-06-29
clubs:
·RoadRunner Cable
·AT&T Southeast
·QuantumVoice

1 edit		 If you look in the manual to the router it tells you how to upgrade the firmware. If not goto linksys website click on tech support and they do a good job step by step on how to upgrade it.

Edit i see main man beat me to typing, guess im too slow..:D:D:D
permalink · 2005-08-16 14:37:16 · Reply to this
Roop

join:2003-11-15
Ottawa, ON		 ...Except for those who never bother to update their firmware and bought it at the time...

no worries, those people probably don't have any security turned on.
permalink · 2005-08-16 15:32:08 · Reply to this
rusty1285

join:2005-08-16

Re: Sounds like an easy fix-upgrade to newer firmw

I want to turn on my wireless security in for my router but I do not know which is the right mode to pick. There are a number of different options to pick in the "Wireless Security Mode" pulldown menu. I dont know what any of them mean or which is the best to use. Please help. Thanks.
permalink · 2005-08-16 15:56:28 · Reply to this
the niTz
Premium
join:2004-07-05
Sahuarita, AZ

Re: Sounds like an easy fix-upgrade to newer firmw

choose wpa and create a really good alpha numeric combination thats not easy to guess and configure the client with the same settings and bam u've secured ur network, on top of that mac filtering would add a lil more protection on top
permalink · 2005-08-16 17:38:14 · Reply to this

tshirt
Premium,MVM
join:2004-07-11
Snohomish, WA
·Comcast
said by MIllIlITER See Profile:

Sounds like an easy fix - upgrade to the newer 4.70.6 firmware. Problem solved. Except for those who never bother to update their firmware and bought it at the time that the offending firmware was the factory default.;)

My Web Page
Join Red Room Forum
Sounds like piss poor firmware testing, even if it's an easy fix.
But cisco is like that now;)
permalink · 2005-08-16 18:33:25 · Print · Reply to this
justageek6

join:2002-03-07
Marietta, GA

Tried it on a WRT54G

I can't recreate the issue on the G...
using 4.00.7 = No issue
using 4.20.6 = No issue

Dare I speculate that this bug is confined to the GS routers or am I just not testing things right??

Equipment Tested
1 Dell C600
1 Linksys WPC54G version 2 with no firmware updates and standard Linksys drivers
1 Linksys WRT54G version 3

1.) Flashy Flashy to 4.20.6
2.) Run Netstumbler
3.) Found other networks, mine was "missing".
4.) Flashy Flashy to 4.00.7
5>) See step 2
6.) See step 3
7.) Flashy Flashy to 4.20.6
8.) Router cranky at first, but works fine now.
permalink · 2005-08-16 15:47:37 · Print · Reply to this

cableties
Premium
join:2005-01-27

Re: Tried it on a WRT54G

Flashy Flashy to 4.20.6

Haahahahaa! Good one. Flashy Flashy...:D
permalink · 2005-08-16 16:00:53 · Reply to this

jmn1207
Premium
join:2000-07-19
Reston, VA		 Could be limited to the firmware version mentioned in the article, version 4.50.6. Can you test your router with this firmware and post your results?
permalink · 2005-08-16 17:21:56 · Reply to this

aaronfitz
Premium
join:2004-03-06
Cedar Rapids, IA

1 edit

Re: Tried it on a WRT54G

said by jmn1207 See Profile:

Could be limited to the firmware version mentioned in the article, version 4.50.6. Can you test your router with this firmware and post your results?
Linksys.com isn't even showing a firmware of that version for my router, so I'm betting it's not for him either. Mine's a WRT54G version 2.0.

EDIT: Reading closer, this bug is only for the GS. The two firmware versions he tested for the G are the two newest, so the G seems to be immune.
permalink · 2005-08-16 19:12:13 · Print · Reply to this
manadigi

join:2003-11-11
Ogden, UT

update

so I have to update from the machine that is direct connect to the internet or I can do it from my wireless loptop connection?
permalink · 2005-08-16 21:30:35 · Reply to this
Zyniker
Zyniker
Premium
join:2004-12-25
Anaheim, CA

Re: update

It is recommended that you upgrade from a machine that is physically (in other words, ethernet [cable]) connected to the router.

This will vastly decrease the chances of you creating a 'brick' during the upgrade process...
--
Join the Theuth.com Distributed Computing Team!»distributed.theuth.com/deep_thought.htm
permalink · 2005-08-17 01:39:00 · Reply to this
Forums » Linksys WRT54GS Issue

Monday, 06-Sep 03:24:07 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 11 years online! © 1999-2010 dslreports.com.