Off topic slightly, not a linksys user here:
These routers don't have the capability to backup firmware?
Printable View
Off topic slightly, not a linksys user here:
These routers don't have the capability to backup firmware?
Nope (at least the BEFSR41), but you *can* reload older revs via their TFTP utility. Not much help but I can see why they wouldn't care much about this feature based on the target audience.
--TH13
They don't have the ability to backup the user settings. Once you do a "cold" reboot (most Linksys routers can be reset by pushing the reset-button for a second, and this won't delete the user settings; the cold reboot though - done by pushing the reset-button for five seconds - does), you'll have to setup everything again...
The danger will really come when something like this reflashes the firmware to garbage so that the firmware can't be updated again.... Thus you have a pretty doorstop....
Didn't see this listed in the advisory... or anywhere in the discussion...
Maybe I missed it? Its probably another advisory all together...
Apparently these routers are also vulnerable to remote sniffing.
This is because of the way that the BOOTP returns its requests... it includes part of the memory in the return...
The article can explain it better than I:
http://www.theinquirer.net/?article=16298
There are links in the article to more specific info on the exploit.
Note: There is updated firmware for the Linksys BEFSX41 (Firmware Version : 1.50.18 dated 4/30/2004). (I think that I have this router, but I am not at home)
hmpf not to happy about this
BEFSR41 v3(Post on by 3/31)
I have v2 of this router and it appears as if Linksys aren't going to release anymore firmware for it. This can be expected I suppose because its an older product, but at the very least I would expect that they would fix major security issues like this...
Also it does tick me off that they just release a new version of the same product, without actually changing the name of the product, it makes it a lil harder to find firmware/support for your EXACT version.....
Anyone know if the v3 firmware will work on the older versions of the same router?
Edit = I just sent them an email asking about the status of this. I will report back my reply
Linksys are not having a very good time
The WRT54G wireless router has got a problem that aloows users on the WAN side to reconfigure it.
http://www.securiteam.com/securitynews/5LP060KD5K.html
Heres the reply I got, I must say that they are VERY quick in replying
Hello,
I have been updated that most of the updates hopefully will be posted end of today, US time so please do keep checking the webpage.
Sorry the version two can't use V3 firmware.
I would be interested to know. If I dont have the router I mentioned above, I have the same one as you. I cant remember which one I bought.Quote:
Originally posted here by cheesegoduk
hmpf not to happy about this
BEFSR41 v3(Post on by 3/31)
I have v2 of this router and it appears as if Linksys aren't going to release anymore firmware for it. This can be expected I suppose because its an older product, but at the very least I would expect that they would fix major security issues like this...
Also it does tick me off that they just release a new version of the same product, without actually changing the name of the product, it makes it a lil harder to find firmware/support for your EXACT version.....
Anyone know if the v3 firmware will work on the older versions of the same router?
Edit = I just sent them an email asking about the status of this. I will report back my reply
Edit: Too fast for me. ;)