main

BT home router wide open to hijackers

Daniel Fleshbourne   on 09 October 2007 - 09:24 · 8 comments & 5042 views

Advertisement (Why?)
If you rely on BT for high-speed internet or VoIP, there's a good chance a pair of UK-based researchers know how to enable a backdoor in your router that leaves you wide open to eavesdropping, caller spoofing and other nasty attacks.

The vulnerability resides in the BT Home Hub, one of the UK's most popular home routers, according to Adrian Pastor and Petko D. Petkov. A constellation of bugs in the router, which is made by Thomson/Alcatel, make it possible to bypass the device's password authentication system and gain complete administrative control. All an attacker needs to do to exploit the weaknesses is lure the victim to a maliciously crafted website, according to this post on the GNUCitizen blog. The exploit doesn't require knowledge of the administrator password.

View: The full story
News source: The Reg

Post a comment · Send to friend Comments · There are 8 additional comments
#1 lunamonkey on 09 Oct 2007 - 09:33
My mum better not fall for this.
#2 dissonation on 09 Oct 2007 - 10:25
Good, maybe now we'll get a firmware update.
#3 funkymunky on 09 Oct 2007 - 10:30
Ooooopsy

There are three of these homehubs in the vicinity of my wireless network
#4 xSuRgEx on 09 Oct 2007 - 12:39
I wounder if bt have informed their customers about this ? proberly not. LOL



(1 reply) #5 Max™ on 09 Oct 2007 - 16:40
Hopefully they will patch it. The good thing about the Home Hub is that it automatically updates. I hope they will sort out some other minor networking issues as well, like the completely random dropping of the DHCP stuff. I don't know the technical term.
#5.1 shhac on 09 Oct 2007 - 20:07
It would be nice if they fixed the prot forwarding too; mine seem to work for about 10 minutes before the port is closed and access to it is no-longer avalible unless i restart the hub =/

This seems to mainly happen when I want to port forward for both UDP and TCP..

But BT doesnt seem to do what would be nice, do they?
#6 bbfc_uk on 09 Oct 2007 - 20:22
Your lucky, i'm stuck with the crap they call an Orange Livebox, which gets an update every 50 years (give or take a year or so!
#7 n_K on 09 Oct 2007 - 23:05
your forgetting: its not made by BT, they dont control the firmware, they just pay to have it branded, alcatel / thompson make and own the firmware, moan to them for an update

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)