If you're running in bridging mode, your router is not vulnerable to
anything.  You can't give it an ip in bridging mode, it simply decapsulates
the data the comes in and feeds it out the Ethernet port.  The only thing
you're vulnerable to in briding mode is other people on your same segment
being able to see your windows shares if you have any, and sniffers will
sometimes pick up interesting information, especially if you get bored and
use arpspoof from the dsniff suite of tools.  :)  I highly recommend this
fun and educational pastime.  

Jay

-----Original Message-----
From: Joshua b. Jore [mailto:moomonk at greentechnologist.org] 
Sent: Tuesday, August 07, 2001 1:58 PM
To: Bill Layer
Cc: tclug-list at mn-linux.org
Subject: Re: [TCLUG] CBOS 2.4.2 online
http://www.mn-linux.org/members/tanner/

Thanks for the clarification. I'm certainly no CBOS junkie - I didn't even
bother to upgrade from 2.3.something until Sunday. So is there any thing
my bridged modem *is* vunerable to? If it isn't ever internet addressable
I can't see that joe-random rooted box can even touch the thing and it
shouldn't matter what CBOS rev I'm at. Or am I totally off base on this?

Joshua Jore
Minneapolis Ward 3, precinct 10

"The irony of this man being imprisoned in the United States and longing
to return to once-Communist Russia so he can regain his right to free
speach is simply staggering."

On Tue, 7 Aug 2001, Bill Layer wrote:

> On Tue, 7 Aug 2001 06:22:16 -0500 (CDT)
> "Joshua b. Jore" <moomonk at greentechnologist.org> wrote:
>
> > Oh so 2.4.1 isn't code red proof?
>
> No, it is safe.. you are misreading the infomation. All versions of CBOS <
> 2.4.1 are vulnerable... 2.4.1 and 2.4.2 are both fixed.. but I found
> another 'issue' in 2.4.2, which I will be posting about shortly.
>
>
>
>                            -.bill.layer.-
>
> -.those who are talking don't know, and those who know aren't talking.-
>
>            -.frogtown.-     -.minnesota.-      -.u.s.a.-
> _______________________________________________
> tclug-list mailing list
> tclug-list at mn-linux.org
> https://mailman.mn-linux.org/mailman/listinfo/tclug-list
>


_______________________________________________
tclug-list mailing list
tclug-list at mn-linux.org
https://mailman.mn-linux.org/mailman/listinfo/tclug-list