The Traders' Den  

  The Traders' Den > Where we go to learn ..... > Technobabble


Technobabble Post your general Need for Help questions here.
Lossy or Lossless?

Thread Tools
Old 2008-02-05, 02:33 AM
Positive Friction Positive Friction is offline
725.54 GB/590.97 GB/0.81
Join Date: Feb 2006
Icon4 FYI: Severe UPnP Flaw Allows Router Hijacking

Just a headsup for everyone as I know I missed this news last month.

"A vulnerability in networking devices that support UPnP (Universal Plug and Play) can be exploited through a malicious SWF (Flash) file on a Web site, US-CERT warned Monday.

Visiting such a Web site may allow an attacker to reconfigure or take over devices connected to the victim's system that support UPnP. This includes routers, cameras, printers, mobile phones, and digital entertainment systems...Successfully executing the attack allows the attacker to take over the affected router, allowing him or her to bypass firewalls, access Web router administration pages, attack Internet hosts through the router, and alter networking settings."
Reply With Quote Reply with Nested Quotes
Old 2008-02-06, 03:39 PM
Five's Avatar
Five Five is offline
TTD Staff
186.65 GB/588.32 GB/3.15
Join Date: Oct 2004
Location: Canada
Re: FYI: Severe UPnP Flaw Allows Router Hijacking

after looking over here

it seems that not even one person has been hit with this yet.

seems it might be a good idea to block flash and just enable it when you're using a flash-based site like youtube (also speeds up surfing). you can use flashblock extension for ff or in opera go to tools>quick preferences> and uncheck enable plugins. if you're using ie I'm not certain how to block flash (you're probably beyond help anyways in that case--just kidding! ).

if you're feeling clever you can disable UPnP and do things the old fashioned way.

seems that if this becomes any kind of a problem (i.e. one or more ppl affected by it) they will patch the security hole in the next release of flash, so its always good to stay updated.
Checksums Demystified EAC Config MakeTorrent WinAmp Config

Modern social theory casts a highly skeptical eye on any declaration that a group of persons is without conflict, and insists, on the contrary, that conflict is natural to groups, and even more, is essential to them. -Patrick Henry
Reply With Quote Reply with Nested Quotes

The Traders' Den > Where we go to learn ..... > Technobabble

Similar Threads
Thread Forum Replies Last Post
Search engine flaw - Stevolende Site Announcements & Suggestions 25 2009-08-05 08:28 PM
UpnP error - aegert Technobabble 1 2006-09-02 07:14 PM
does UPnP automatically forward ports? - Five Technobabble 7 2006-01-06 10:36 AM
"Converting" A Regular Router Into A Wirless Router? - thisistoto Technobabble 1 2005-10-11 03:08 AM

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -5. The time now is 05:06 PM.

Powered by: vBulletin, Copyright ©2000 - 2016, Jelsoft Enterprises Ltd.
Copyright ©2004 - , - All Rights Reserved - Hosted at QuickPacket
no new posts