[MLB-WIRELESS] Netgear WG602 AP backdoor admin account

[Chris Samuel]

-----BEGIN PGP SIGNED MESSAGE-----

Posted on the Bugtraq list, reference on /.

	http://www.securityfocus.com/archive/1/365069

"The webinterface which is reachable from both interfaces (LAN/WLAN)
contains an undocumented administrative account which cannot be disabled."

"A search on Google revealed that "5777364" is actually the phonenumber
of z-com Taiwan which develops and offers WLAN equipment for its OEM
customers."

"Systems Affected
- ----------------

        Vulnerable (verified)
                WG602 with Firmware Version 1.04.0

        Possibly vulnerable (not verified)
                WG602 with other Firmware Versions
                WG602v2
                All other z-com derived WLAN Accesspoints"

- -- 
 Chris Samuel  :  http://www.csamuel.org/  :  Melbourne, VIC

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iQEVAwUBQMJkB41yjaOTJg85AQGtOQf/bGI2/1jr7VkSVG0cTsWqUMVXm7i8Qs/J
Ta80ruGOwxwdqkZwLmk6jR+V79cfOemcDAGousioH8prW2pV3MewS7wZhlJ//g0A
9/3tWrWheqryDCLrW7sIy7f+WywMuhit2xpD6G47pv5VWhdRZbbp9bZTt8KooHk3
xiJ1zA2QoCPs8Y60l3qvCf1o7u2e5TvtrJ9F4HF21mGKZSbpPchMFiCEETD6KsfG
RQ6ossppzmxQ5CE7Vb6m39BC+wvRLFgVKSdUTZNALGhqmPOVCDF1XQYm+oQcUR/V
Ji4vwbgsVRFba4wp/PbNvHgGpNOAbF+QiYfOHqYBJ38aCOttxq4A0w==
=Zyo0
-----END PGP SIGNATURE-----

To unsubscribe: send mail to majordomo at wireless.org.au
with "unsubscribe melbwireless" in the body of the message