Trackback URI | Comments are closed.
Oppsss… Linksys RTP300 VoIP router.
November 21st, 2005
I just found a bug in the login script of the RTP300 Linksys VoIP router. The firmware is 1.00.55 version. This was just by accident. My password contains letters and numbers. I was typing too fast and at the end of my password I typed the wrong number. By the time my actions clicked in my hear I had already hit enter. And what do you know? I was able to log in. This caused me to think about this, so I tried few different combinations of passwords and this is what I discovered.
- If the passwords starts with letters and ends on number(s). As long as the letter part of the password is correct, when entered at the log in screen if the number(s) at the end is not included or mistyped the user will still be able to log in.
- If the password is all numbers or starts with numbers then the user will need the correct password.
It seems like if you have numbers at the end of your password, and even if you mistype them, you will still be able to log in if your password starts with a letter.
Linksys I think it is time for you guys to work on this.
Filed under Techie | | Email | Print |2 Responses to “Oppsss… Linksys RTP300 VoIP router.”
Well the linksys company should hire you and Hack the world You Phreaker.
Hehe, thanks bro. I would not mind it but I got better plans.
BTW, I can sum up Linksys response to my e-mail in few words and they are: Thanks for the info! We will work on it!