28 Sep
2014
28 Sep
'14
6:56 p.m.
James Harper wrote:
thanks , interesting well that's a relief !
regards Rohan McLeod
NetComm ADSL2+
Router NB6_REV2_16M
Software Version: 3.65p
Login name: admin
Password: admin
And I'm in. It's a shell, but can't tell what. ps shows a 'sh'
process running.
Actually:
ps --help
BusyBox v1.00
(2010.01.12-11:52+0000) multi-call binary
Usage: ps
Report process status
This version of ps accepts no options.
So... not bash.
James
29 Sep
29 Sep
12:11 p.m.
New subject: bash "Shell Shock" vulnerability
Rohan McLeod <rhn(a)jeack.com.au> writes:
James Harper wrote:
thanks , interesting well that's a relief !
IMO this is not a reliable test.
I know of at least Thecus NAS installs which ship busybox,
but include bash. Such a system would show the same "I'm busybox"
output when running ps in bash, since it is not a bash builtin.
I don't know offhand of a reliable test.
Off the top of my head, I'd suggest "echo $BASH_VERSION",
which seems to be under --posix (which more-or-less correponds to
invoking as argv[0] = "/bin/sh").
Probably the Right Thing would be to test for the actual vuln.
NetComm
ADSL2+ Router NB6_REV2_16M
Software Version: 3.65p
And I'm in. It's a shell, but can't tell what. ps shows a 'sh'
process running.
Actually:
ps --help
BusyBox v1.00
(2010.01.12-11:52+0000) multi-call binary
So... not bash.
2:09 p.m.
New subject: bash "Shell Shock" vulnerability
trentbuck(a)gmail.com (Trent W. Buck) wrote:
Rohan McLeod <rhn(a)jeack.com.au> writes:
Thanks Trent:
Well as mentioned I can only Telnet 192.168.1.1 to the login prompt;
thus far can't find a working u/n and p/w combination to get me to the
shell;
definitely not the u/n "admin" and p/w "admin" (default) of the web
interface;
which seems to be the case for James.
Actually now I notice the firmware for my
Netcomm NB6Plus4W (iPrimus issued) is vs 3.65n
wheras Jame's NetComm ADSL2+ Router NB6_REV2_16M is vs 3.65p
iPrimus support nearly had a nervous breakdown when consulted;
couldn't even tell me whether it was deliberately blocked !
Netcomm support are supposedly going to email me
a working u/n and p/w and even gave me a reference number !;
if something eventuates, I post the result
regards Rohan McLeod
James Harper wrote:
thanks , interesting well that's a relief !
IMO this is
not a reliable test.
I know of at least Thecus NAS installs which ship busybox,
but include bash. Such a system would show the same "I'm busybox"
output when running ps in bash, since it is not a bash builtin.
I don't know offhand of a reliable test.
Off the top of my head, I'd suggest "echo $BASH_VERSION",
which seems to be under --posix (which more-or-less correponds to
invoking as argv[0] = "/bin/sh").
Probably the Right Thing would be to test for the actual vuln. NetComm
ADSL2+ Router NB6_REV2_16M
Software Version: 3.65p
And I'm in. It's a shell, but can't tell what. ps shows a 'sh'
process running.
Actually:
ps --help
BusyBox v1.00
(2010.01.12-11:52+0000) multi-call binary
So... not bash.
_______________________________________________
luv-main mailing list
luv-main(a)luv.asn.au
http://lists.luv.asn.au/listinfo/luv-main
6 Oct
6 Oct
1:06 p.m.
New subject: bash "Shell Shock" vulnerability
trentbuck(a)gmail.com (Trent W. Buck) wrote:
Rohan McLeod <rhn(a)jeack.com.au> writes:
........snip
Actually now I notice the firmware for my
Netcomm NB6Plus4W (iPrimus issued) is vs 3.65n
wheras Jame's NetComm ADSL2+ Router NB6_REV2_16M is vs 3.65p
iPrimus support nearly had a nervous breakdown when consulted;
couldn't even tell me whether it was deliberately blocked !
Netcomm support are supposedly going to email me
a working u/n and p/w and even gave me a reference number !;
if something eventuates, I post the result
....................................
Should anyone be interested; after numerous unsuccessful attempts to
up-date the firm-ware for the:
Netcomm NB6Plus4W (iPrimus issued) firmware vs 3.65n;
Netcomm support diagnosed a faulty router.
So I will just live with my frustrated curiosity;
as it will be replaced when I move to NBN
regards Rohan McLeod
James Harper wrote:
thanks , interesting well that's a relief !
IMO this is
not a reliable test.
I know of at least Thecus NAS installs which ship busybox,
but include bash. Such a system would show the same "I'm busybox"
output when running ps in bash, since it is not a bash builtin.
I don't know offhand of a reliable test.
Off the top of my head, I'd suggest "echo $BASH_VERSION",
which seems to be under --posix (which more-or-less correponds to
invoking as argv[0] = "/bin/sh").
Probably the Right Thing would be to test for the actual vuln. NetComm
ADSL2+ Router NB6_REV2_16M
Software Version: 3.65p
And I'm in. It's a shell, but can't tell what. ps shows a 'sh'
process running.
Actually:
ps --help
BusyBox v1.00
(2010.01.12-11:52+0000) multi-call binary
So... not bash.
_______________________________________________
luv-main mailing list
luv-main(a)luv.asn.au
http://lists.luv.asn.au/listinfo/luv-main
_______________________________________________
luv-main mailing list
luv-main(a)luv.asn.au
http://lists.luv.asn.au/listinfo/luv-main
3098
days inactive
3106
days old
3 comments
2 participants
participants (2)
-
Rohan McLeod -
trentbuck＠gmail.com