Linksys Wi-Fi router vulnerability discovered

CNET ^ | 6/4/04 | Marguerite Reardon

[TomServo]

Cisco Systems has issued a patch for a security flaw in one of its Linksys routers that could give hackers access to consumers' home networks.

Alan Rateliff II, an independent security consultant, on Friday said he discovered a vulnerability in the Linksys WRTS54G 802.11g wireless router. The flaw gives hackers a free pass into the Web-based configuration page of the router when the firewall function is turned off.

[snooker]

I agree with the virus. If you get one, it's a biatch to get rid of and causes many days of angst. I have virus scanners on each windows box. But I try and enforce a 'boot to Linux' when browsing or reading email.

I think the individual firewall gets in the way for home use, if you run a virus scanner on every action, and keep the virus databases up to date, that seems to do the trick.

For me, running Linux is the best way. I can lock down the user space and let the user do what they want.

Many ways to handle security, but ultimately the user is responsible for what happens.

BTW did you see the servey that said most of the spam is caused by 'zombie pcs'? A little security goes a long way.

[FreedomPoster]

>>IMHO the average home user would benefit greatly from putting a $50 router between their PC and the Internet, regardless the connection used.

IMHO, if the average home user doesn't have that $50 router on a high-speed connection, that user is an idiot. Hanging general-use desktop computers directly off of the Internet is pure idiocy, in today's world.

[South40]

There are several free security scanners available to determine vunerability.

Here's one from Symantec.

[rintense]

Good to go! Also have our corporate anit-virus software installed. Thanks for the link!

[South40]

You may also want to reconfigure your security setting for the Linksys router as the default settings are well known to hackers. Enter 192.168.1.1 into your address bar and click go. This should take you to the configuration page. Disregard this if you've already done so.

[inflation]

Why? I have no firewall and I do not have to worry about virus and other attacks.

[South40]

Why what?

[John Lenin]

dittos

[steplock]

That is also a good side benefit of Zone Alarm --- if you do get a virus (usually through a CD or disk) it prevents the damned thing from getting out .... unless you tell ZA "yes".

As far as linux based servers, I am currently working on setting up a Net-Integrator Nit-Ix (linux based) server.

I'm running a trial version right now - and it is phenomenal! setup was a breeze and operation speed makes RedHat look like win2k ;>)

[drtom]

LOL.

See, snooker, there is always someone who says exactly how it is without IMHOing around. ;-)

Nah, seriously, the problem is most people go for the cheapest ISP bundle without much knowledge of the ramifications. It would be interesting to see a comparison of what a Sasser costs in phone support vs. a modem/firewall router combo. You would think the ISPs would have figured that out by now. Oh, well. A lot of our students find their first job in phone support for a provider, so hey, keep the market

[Sub-Driver]

I've been using wi fi for 2 years now. my ISP is Comcast, and I use a cable modem. my router is linksys / cisco, model type I forget for now. have 3 pc's, one direct attached the other 2 wi fi. no issues as long you have a firewall running on each machine (I use zone alarm) and keep the OS up to date (i'd like to someday bill msoft for that time wasted) and use an AV. also recommend using an adware product like lavasoft to get rid of those pesky little data miners. unfortunately we now have pc hygiene's to worry about. also turn off msoft messenger (a must!) and don't forget to change the password on the router! you'll be fine upgrading.

[drtom]

It is definitely a good product. But it has also caused me grief to no end when working on active content and such. There are some weird undocumented settings in there. By the time you have it tracked down an entire morning has passed.

But I do agree, for the typical home user, a good solution.

[inflation]

Why should I have a firewall?

[drtom]

What's your IP address? I'll show you in a minute.

[Publius6961]

Why would you have a hardware firewall and turn it off?
Can't it be tested/serviced off line?

[steplock]

1.  Security Test
2.  Virus Scan
3.  AVG AntiVirus
4.  Zone Alarm
5.  Search& Destroy
6.  Ad-Aware

[drtom]

.... when the firewall function is turned off well....DUH!

GMC has announced a similar problem with their SUVs. When the steering wheel is removed the steering becomes prone to rather erratic and unexpected behaviour.

[South40]

If you think you need one, fine. But I suggest you go to Gibson Research and run their Shields Up utility to check for vulnerabilities. The results may change your mind.

[South40]

lol!

[inflation]

Check your frmail