[plug] [cert-advisory at cert.org: CERT Advisory CA-2001-08]

[Jason Nicholls]

Interesting CERT Advisory today because these are the same ADSL modems that
Telstra use!

----- Forwarded message from CERT Advisory <cert-advisory at cert.org> -----

From: CERT Advisory <cert-advisory at cert.org>
Subject: CERT Advisory CA-2001-08
Date: Tue, 10 Apr 2001 19:46:17 -0400 (EDT)

CERT Advisory CA-2001-08 Multiple Vulnerabilities in Alcatel ADSL Modems

   Original release date: April 10, 2001
   Last revised: --
   Source: CERT/CC

   A complete revision history can be found at the end of this file.

Systems Affected

     * Alcatel Speed Touch Home ADSL Modem
     * Alcatel 1000 ADSL Network Termination Device

Overview

   The San Diego Supercomputer Center (SDSC) has recently discovered
   several vulnerabilities in the Alcatel Speed Touch Asymmetric Digital
   Subscriber Line (ADSL) modem. These vulnerabilities are the result of
   weak authentication and access control policies and exploiting them
   will lead to one or more of the following: unauthorized access,
   unauthorized monitoring, information leakage, denial of service, and
   permanent disability of affected devices.

   The SDSC has published additional information regarding these
   vulnerabilities at

          http://security.sdsc.edu/self-help/alcatel/

<snip>
----- End forwarded message -----

I'm not posting the whole lot, follow the link if this is a concern to you.


Later,

Jason Nicholls
--------------------------------------------------------------------
Jason Nicholls    icq: 11745841    email: <jason at mindsocket.com.au>
Proprietor                        mobile: 0417 410 811
Mind Socket [web services]          http://www.mindsocket.com.au/
--------------------------------------------------------------------