Bugtraq mailing list archives
Re: NETGEAR DG834G SPECIAL FEATURES
From: "Uday Moorjani" <umoorjani () wanadoo fr>
Date: Fri, 13 Aug 2004 10:24:55 -0400
Dear Sir, But in order to have access to setup.cgi you need to bypass the .htaccess protection. I've tried it on my DG834G and it requires me to enter the .htaccess password. Uday K. MOORJANI ----- Original Message ----- From: <thanasonic () hack gr> To: <bugtraq () securityfocus com> Sent: Thursday, August 12, 2004 1:39 PM Subject: NETGEAR DG834G SPECIAL FEATURES
By opening http://192.168.0.1/setup.cgi?todo=debug you enable the router's
debug mode.Then you just telnet at 192.168.0.1 at port 23 and then you have a root shell.
Also i found that if you just telnet to 192.168.0.1 2602 you will get a
prompt from the service ZEBRA that is running on the router.By giving "zebra" as password *which is the default password* you got also a root shell.
--- avast! Antivirus: Inbound message clean. Virus Database (VPS): 0433-2, 10/08/2004 Tested on: 13/08/2004 09:30:54 avast! is copyright (c) 2000-2003 ALWIL Software. http://www.avast.com
--- avast! Antivirus: Outbound message clean. Virus Database (VPS): 0433-2, 10/08/2004 Tested on: 13/08/2004 10:24:56 avast! is copyright (c) 2000-2003 ALWIL Software. http://www.avast.com
Current thread:
- NETGEAR DG834G SPECIAL FEATURES thanasonic (Aug 12)
- Re: NETGEAR DG834G SPECIAL FEATURES Uday Moorjani (Aug 13)
- <Possible follow-ups>
- RE: NETGEAR DG834G SPECIAL FEATURES Andre Lorbach (Aug 13)
- Re: NETGEAR DG834G SPECIAL FEATURES thanasonic (Aug 13)
- Re: NETGEAR DG834G SPECIAL FEATURES Dave Paris (Aug 13)
- Re: NETGEAR DG834G SPECIAL FEATURES Paul James (Aug 25)
- Re: NETGEAR DG834G SPECIAL FEATURES Rodrigo Barbosa (Aug 27)
- RE: NETGEAR DG834G SPECIAL FEATURES prj (Aug 26)
- Re: NETGEAR DG834G SPECIAL FEATURES Luca Berra (Aug 31)
- Re: NETGEAR DG834G SPECIAL FEATURES Rodrigo Barbosa (Aug 27)