Forum Home
Press F1
 
Thread ID: 107571 2010-02-22 08:36:00 ChuckNorris - the new Dlink attack. adslgeek (14687) Press F1
Post ID Timestamp Content User
860598 2010-02-22 08:36:00 Hi there,

As I have previously warned, if you have a Dlink modem, now might be an even better time to upgrade the firmware, as there is a new Worm doing the rounds.

The Chuck Norris worm attacks a few different devices, including (among others) the vulnerable Dlink routers

www.darkreading.com

My first recommendation is to log into your router, and change the default password.
But mainly check that you have installed the most recent version of firmware.

This does not JUST impact the following routers, but these are known to be vulnerable..

The following routers are reportedly affected:
* DSL-502T
* DSL-504T
* DSL-562T
* DSL-G604T

The security issue has been reported in the following firmware versions:
* V1.00B01T16.EN.20040211
* V1.00B01T16.EU.20040217
* V0.00B01T04.UK.20040220
* V1.00B01T16.EN.20040226
* V1.00B02T02.EU.20040610
* V1.00B02T02.UK.20040618
* V1.00B02T02.EU.20040729
* V1.00B02T02.DE.20040813
* V1.00B02T02.RU.20041014

I will also keep updating details as I discover them here www.adslgeek.com/dslforum

Cheers,
ADSLgeek
adslgeek (14687)
860599 2010-02-22 08:41:00 There isnt an update for the G604T, since V3.02B01T01.NZ.20080827 (rev C), v3.00B02.NZ 20060711 (rev A), or v3.00B02.NZ 20060711 (rev B). These arent the telecom modems. None of those versions are NZ ones Speedy Gonzales (78)
860600 2010-02-22 08:46:00 I also posted an article link in the chat section. nedkelly (9059)
860601 2010-02-22 11:50:00 Presumably the router needs to be accepting connections from the net to be vulnerable?
With that and a default password you would have more to worry about than the latest worm.
fred_fish (15241)
860602 2010-02-22 17:54:00 How do I log into my router to change the pw, and how do I get the latest upgrade? My router is a dsl-502t jonathan (15437)
860603 2010-02-22 18:14:00 You need to know the ip address for the router. Easy way to find out is look for the gateway address for your network adapter. Put the address into your web browser, It will then ask you for a user name and password. nedkelly (9059)
860604 2010-02-22 19:22:00 This was the first thing that came to mind: www.youtube.com

Anyways, poor D-Link, but all regulars here know better than to use them by now surely ;)
Chilling_Silence (9)
860605 2010-02-22 19:25:00 Well not everyone here is rich. And can afford to buy one every week Speedy Gonzales (78)
860606 2010-02-22 20:28:00 Dlink or anything else is irrelevant, running any router with the web interface open to the world AND a default pw is just retarded. fred_fish (15241)
860607 2010-02-22 20:35:00 There's worse things around atm. If you're using FF 3.6, its got a zero day exploit. Which can be used to control your PC. Speedy Gonzales (78)
1 2 3