Bugtraq mailing list archives

Re: LinkSys WRT54G administration page availble to WAN


From: "Peter Becker" <peter.becker () oberkassel de>
Date: Thu, 3 Jun 2004 11:17:27 +0200

I have a WRT54G at home.  After seeing all the discussion here about the
remote administration vulnerability I tried to access the web interface
today on ports 80 and 443 from outside of my home network and was not able
to get to the web interface either.

But, having said that, I'm still fairly disappointed with this product.
Linksys used to incorporate SNMP support that made it possible to use
Linklogger, a very inexpensive and capable firewall logger.  But, it
appears
that SNMP and syslog support are gone.  I contacted tech support about
this
and they agreed that the WRT54G has no support for external event logging.
Too bad.

There are several other firmwares for this product.
I use OpenWRT this is realy great.
I don't know, if the other firmware makes it possible to external event log,
but you could make nfs-mounts so you could write the eventlog on a
network-share.

To the issue:
I tested the original firmware before flashing.
And I also wasn't able to access the webinterface from the wan-port.
I've got hardware revision 2.


Peter


Current thread: