Bugtraq mailing list archives
3Com cable modems / Mediaone
From: signal11 () MEDIAONE NET (Signal 11)
Date: Sat, 27 Nov 1999 14:09:44 -0600
I'm not certain this is the appropriate forum to discuss this, however I've been unable to locate any documentation about this on 3Com's website nor has technical support been helpful in enlightening me (I have called their 800 number). The 3Com external cablemodem (CMX) allows the upstream provider to download firmware updates into your cablemodem. This can (and I suspect usually is) done without the user's knowledge, and it took some digging to uncover this "feature". The cable- modem can also be reprogrammed via a serial port in back, although my attempts to access it have proven futile. I am also very curious to find out how to telnet into this thing, as there are references to it being "password protected" to prevent intruders. Somehow I rather doubt mine was given a password (and thus open to the whole world). I'm very much concerned about using a device, which has little/no technical specifications, with my system. Can firmware be uploaded by anyone? How does the modem authenticate the head-end system? Does anyone have any information on how to reprogram this modem? -- Signal 11, BOFH to the UF list and malign.net Where's the DIR command?
Current thread:
- Re: WordPad/riched20.dll buffer overflow, (continued)
- Re: WordPad/riched20.dll buffer overflow Gerardo Richarte (Nov 24)
- (no subject) Swen Persson (Nov 24)
- Re: WordPad/riched20.dll buffer overflow Gerardo Richarte (Nov 24)
- Re: WordPad/riched20.dll buffer overflow pedward () WEBCOM COM (Nov 26)
- Re: WordPad/riched20.dll buffer overflow Christopher Rhodes (Nov 26)
- Re: WordPad/riched20.dll buffer overflow Glynn Clements (Nov 27)
- SCO su patches Alfred Huger (Nov 28)
- Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow UNYUN (Nov 29)
- Page table protection on Intel Jason Spence (Nov 26)
- SuSE Security Announcement - new security tools Marc Heuse (Nov 26)
- 3Com cable modems / Mediaone Signal 11 (Nov 27)
- Re: 3Com cable modems / Mediaone Joseph W. Breu (Nov 29)
- NTmail and VRFY George (Nov 30)
- Netscape Communicator 4.7 - Navigator Overflows Mike Boto (Nov 27)
- Re: WordPad/riched20.dll buffer overflow Crispin Cowan (Nov 27)
- Re: WordPad/riched20.dll buffer overflow Solar Designer (Nov 29)
- Re: WordPad/riched20.dll buffer overflow Casper Dik (Nov 30)
- Default IE 5.0 security settings allow frame spoofing Georgi Guninski (Nov 30)
- Re: WordPad/riched20.dll buffer overflow Jason Spence (Nov 28)
- TooRcon Computer Security Expo Announces Pre-Registration Ben (Nov 28)