A quick google shows A page detailing the exploit (well not even an exploit
really. Just plain dodgy firmware)
google for:
DSL-500 snmp remote security

Or just go here:
http://www.securitytracker.com/alerts/2003/Mar/1006396.html
or here:
http://www.smh.com.au/articles/2003/03/28/1048653851457.html
or here:
http://www.sans.org/newsletters/sac/vol3_15.php

Both the 500 and the 300G and 300G+ are affected. I dont know of any others
that are. But I wouldn't take my word for it. Find out for yourself if you
buy a Dlink.

Cheers,
Rob

-- 
--------------
Robert McDonald
NZPages.Net Web Services
Ph: 021 1770061
ICQ: 86984875
http://www.nzpages.net
On Mon, 04 Aug 2003 18:24, Mark Foster wrote:
> > dont go with the DSL-500
> > It has VERY nasty backdoors in the firmware (eg, you can rip out
> > someones  username and password using SNMP management. And its not
> > firewalled to the  internal interface only. It only takes a quick nmap
> > of an ISPs DSL network  and you'll find lots.
> > Dlink said they fixed the problem with a firmware update. But they lied
> > (or at  least didn't tell all of the truth)
> >
> > Cheers,
> > Rob
>
> Can we have some evidence of this please?
>
> Any routers firmware can be hacked but if theres a serious issue with the
> DLink im sure theres people who need to know about it.
> On the other hand the current version of Firmware has been current for
> some time and ive not seen any security issues come up through various
> forums.
> Details, please!  This is a serious allegation and some facts to back it
> up can only help us out.
> Mark.
>
> (Opinions are mine and do not reflect my employer or any companies
> associated with my employer)
-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message