Reply
charlie111
Posts: 1
Registered: ‎08-07-2006

DEFCON reports security vulnerability in RTP300

Is linksys going to issue new firmware?

From CNN.com:
http://www.cnn.com/2006/TECH/08/06/passport.security.ap/index.html

"Routers faulted

Another security professional showed how people can have their phone numbers hijacked when using certain types of equipment that route calls over the Internet.

The research, from Arias Hung, a security professional with Media Access Guard in Seattle, showed how to control the inner workings of Internet phone routers made by Linksys, which is owned by Cisco Systems Inc.

Once the routers are accessed, a person can change the device's so-called media access control address, which acts as a serial number that Internet phone providers such as Vonage Holdings Corp. use to verify the identity of customers.

A person exploiting the flaw could intercept calls made to a legitimate Vonage user and make calls that would appear to come from the user's phone number.

"The service providers should be very concerned," Hung said. "The general consumer should stay away from this router," he said, referring to two models that Linksys designates the WRTP54G and the RTP300.

Cisco spokeswoman Molly Ford said she could not immediately comment on Hung's research."
tricky1
Posts: 28
Registered: ‎06-29-2006

Re: DEFCON reports security vulnerability in RTP300

I never dared to make the linksys router visible to the public side of internet. You never can know ...