----------------------------------------------------------------------

BETA test the new Secunia Personal Software Inspector!

The Secunia PSI detects installed software on your computer and
categorises it as either Insecure, End-of-Life, or Up-To-Date.
Effectively enabling you to focus your attention on software
installations where more secure versions are available from the
vendors.

Download the free PSI BETA from the Secunia website:
https://psi.secunia.com/

----------------------------------------------------------------------

TITLE:
Infrant ReadyNAS Devices SSH Default Root Password Weakness

SECUNIA ADVISORY ID:
SA26442

VERIFY ADVISORY:
http://secunia.com/advisories/26442/

CRITICAL:
Not critical

IMPACT:
Security Bypass

WHERE:
>From remote

OPERATING SYSTEM:
Infrant ReadyNAS Devices 3.x
http://secunia.com/product/15287/

DESCRIPTION:
Brian Chapados and Felix Domke have reported a weakness in Infrant
ReadyNAS devices, which can be exploited by malicious people to
bypass certain security restrictions.

The problem is that the device includes an SSH daemon that cannot be
disabled and that the password for the SSH root account on the device
is generated using certain device-specific values (e.g. MAC address,
serial number, version number) and cannot be changed permanently.
This can potentially be exploited to generate the SSH root password
and gain access to the target device.

The weakness is reported in ReadyNAS devices with RAIDiator
3.01c1-p1, 3.01c1-p6. Other versions may also be affected.

SOLUTION:
The vendor has provided the ToggleSSH add-on to disable/enable SSH on
the device and has released RAIDiator 4.00b2-p2-T1 beta version, which
has SSH disabled by default.

http://www.infrant.com/download/addons/ToggleSSH_1.0.bin
http://www.infrant.com/beta/raidiator/4.0/RAIDiator-4.00b2-p2-T1

PROVIDED AND/OR DISCOVERED BY:
Brian Chapados and Felix Domke

ORIGINAL ADVISORY:
Infrant Technologies:
http://www.infrant.com/forum/viewtopic.php?t=12313
http://www.infrant.com/forum/viewtopic.php?t=12249

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------