[11936] in bugtraq

home help back first fref pref prev next nref lref last post

Re: ASUS mother board security question...

daemon@ATHENA.MIT.EDU (Alan Cox)
Fri Sep 17 04:54:47 1999

Content-Type: text
Message-Id:  <E11Rl4o-0003Ln-00@the-village.bc.nu>
Date:         Fri, 17 Sep 1999 00:36:28 +0100
Reply-To: Alan Cox <alan@LXORGUK.UKUU.ORG.UK>
From: Alan Cox <alan@LXORGUK.UKUU.ORG.UK>
X-To:         rsh@idirect.com
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To:  <2lPhNzV7W214Xb50p0gzGmlJby13@4ax.com> from "R.S." at Sep 16,
              99 04:42:18 pm

> a function (if you are using an ATX power supply) to remotely turn on the
> computer if anything is received on either the LAN or modem ports.  It seems

Wake-On-Lan.

> 1)	am I correct in assuming that anyone who sends a packet to you over the
> Internet will appear on the LAN port if you have a cable modem and if so
> will they have access to your computer?

If it is set to wake on any packet then yes. Wake-on-lan is sometimes done
with special packets. Its a feature really. Your box goes to sleep someone
delivers it mail and it wakes up again.

> I am aware that a BIOS switch will disable these features but they could be
> useful if the machine is properly configured.

The one to watch are the machines that allow remote shutdown via lan messages.
They have a password scheme, but its unencrypted

home help back first fref pref prev next nref lref last post