Bugtraq mailing list archives

Re: Motorola Cable Modem DOS


From: Juraj Ziegler <e () hq sk>
Date: Mon, 4 Nov 2002 11:06:15 +0100

On Wed, Oct 30, 2002 at 02:02:27PM -0600, Ryan Sweat wrote:
I've found it trivial to crash the Motorola Surfboard 4200 Cable modem,
as installed default by AT&T Broadband Internet.

The modem acts as a bridge, but also has an internal RFC1918 IP address
(192.168.100.1).  Simply  nmap'ing the cable user's IP address, ie:
# nmap -sS -p 1-1024 12.x.x.x
will cause it to crash, rendering the ethernet interface useless.  It is
also possible to crash it from the lan by simply doing the same scan
against the cable modem's internal IP address.  The crash is not
specific to nmap, there are other publicly available tools which cause
the same result.  This is known to be effective on Software Version:
SB4200-0.4.4.0-SCM06-NOSH. (possibly others?)

Nothing happens to a SB4200E-0.4.4.1-SCM04-NOSH. Everything works fine
after a scan.

[e]

-- 
_______________________________________________________________________________
e () hq sk<                   /(bb|[^b]{2})/                 >http://hq.sk/~euro<
    "Programming today is a race between software engineers striving to
    build bigger and better idiot-proof programs, and the Universe trying
    to produce bigger and better idiots. So far, the Universe is winning."
                                                                    -- Rich Cook        

Attachment: _bin
Description:


Current thread: