NetGear routers DDoS-en Univ of Wisconsin !

Article View: nl.comp.hardware

Article #507

#507

From: Wannes
Date: Fri, 12 Sep 2003 10:37

33 lines
2428 bytes

In het kort :

Netgear routers RP614v2, RP614, MR814, DG814 en HR314 vragen onophoudelijk
de tijd op bij de tijdserver van de University of Wisconsin, en cre�ren daar
een massa internetverkeer.

Firmware updates :

http://kbserver.netgear.com/kb_web_files/n101176.asp


Artikel :

http://www.cs.wisc.edu/~plonka/netgear-sntp/#ToC43


Affected Netgear Products :

RP614v2, RP614: 4-Port Cable/DSL Router with 10/100 Mbps Switch
MR814: 802.11b Cable/DSL Wireless Router
DG814: DSL Modem Internet Gateway
HR314: 802.11a Cable/DSL High-Speed Wireless Router: code fix pending.



Flawed Product Counts

As of June 30, 2003, Netgear reported a total of 707,147 affected products
manufactured. Some simple math: If there are 700,000 errant SNTP clients
each of which can generate one SNTP request per second to our time server,
then the worst-case aggregate rate will be about 700,000 packets per second.
Since each SNTP packet is 76 bytes in size, that is also 426 megabits per
second of traffic.

Technical Details

Message-ID: <BB876E78.AD5FB%Wannes@gmx.net.invalid>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-01!sn-xit-09!supernews.com!newsfeed.news2me.com!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.freenet.de!194.168.4.91.MISMATCH!newspeer1-gui.server.ntli.net!ntli.net!news2.euro.net!nl-news.euro.net!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 1123d2,5a659eebdec5db62,start
X-Google-Attributes: gid1123d2,public
X-Google-Thread: 10e3f2,5a659eebdec5db62,start
X-Google-Attributes: gid10e3f2,public
X-Google-Thread: f8da1,5a659eebdec5db62,start
X-Google-Attributes: gidf8da1,public
X-Google-Thread: 1151bb,5a659eebdec5db62,start
X-Google-Attributes: gid1151bb,public
X-Google-ArrivalTime: 2003-09-12 03:37:35 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-01!sn-xit-09!supernews.com!newsfeed.news2me.com!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.freenet.de!194.168.4.91.MISMATCH!newspeer1-gui.server.ntli.net!ntli.net!news2.euro.net!nl-news.euro.net!not-for-mail
From: Wannes <Wannes@gmx.net.invalid>
Newsgroups: nl.comp.hardware,nl.comp.sys.mac,be.comp.sys.mac,be.comp.hardware
Subject: NetGear routers DDoS-en Univ of Wisconsin !
Date: Fri, 12 Sep 2003 12:37:12 +0200
Organization: EuroNet Internet
Lines: 34
Message-ID: <BB876E78.AD5FB%Wannes@gmx.net.invalid>
NNTP-Posting-Host: d5779430.kabel.telenet.be
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Trace: nl-news.euro.net 1063363033 24503 213.119.148.48 (12 Sep 2003 10:37:13 GMT)
X-Complaints-To: usenet@nl-news.euro.net
NNTP-Posting-Date: Fri, 12 Sep 2003 10:37:13 +0000 (UTC)
User-Agent: Microsoft-Entourage/10.1.4.030702.0