Home » 

UK ISP News Archives

 » 
Sponsored Links

UPDATE: GNUCitizen Uncovers BT Home Hub Vulnerability

Posted: 22nd Jan, 2008 By: MarkJ
UPDATE: BT has denied that its customers are affected by the vulnerability, at least not so long as they're on the latest firmware 6.2.6.E. However it can take time for the new updates to be rolled out.

The "ethical" hacking website, GNUCitizen, has uncovered yet another (first one) vulnerability in BT Total Broadband's "Home Hub" ADSL routers, which could allow hackers to steal or hi-jack Voice-over-IP (VoIP) calls:


In summary, if the victim visits our evil proof-of-concept webpage, his/her browser sends a HTTP request to the BT Home Hub’s web interface. After this, the Home Hub starts a VoIP/telephone connection to the recipient’s phone number specified in the exploit page.

This is what the attack looks like: the victim’s VoIP telephone starts ringing and shows an external call message on the LCD screen along with the recipient’s phone number. However, what’s interesting is that from the point of view of the victim, it looks like he/she is receiving a phone call from the number shown on the screen, but in fact he/she is calling that number!

Now, this attack will work even if the default admin password has been changed on the BT Home Hub. Reason for this is that the exploit relies on an authentication bypass vulnerability that we have reported a while ago and hasn’t still been fixed by BT! In our original report, we mentioned that the HTTP authentication mechanism can by bypassed by using double slashes in the target URL. Actually, the authentication can also be bypassed with many other characters, but I’ll leave this to the reader to discover.

It's noted that only customers using the BT Broadband Talk service are affected by this attack, which was tested on Home Hub's using the 6.2.6.B firmware. BT originally disabled the routers Remote Assistance features to close a previously exploit, yet this does not prevent VoIP call hi-jacking. BT is investigating the problem.
Search ISP News
Search ISP Listings
Search ISP Reviews
 Latest UK ISP News
 Cheapest Superfast Broadband ISPs
  • Hyperoptic £17.99
    Speed 33Mbps, Unlimited
    Gift: None
  • UtilityWarehouse £19.99
    Speed 35Mbps, Unlimited (FUP)
    Gift: None
  • NOW £23.00
    Speed 63Mbps, Unlimited
    Gift: None
  • Vodafone £24.00
    Speed 73 - 82Mbps, Unlimited
    Gift: None
  • Shell Energy £24.99
    Speed 38Mbps, Unlimited
    Gift: None
Large Availability | Compare More ISPs
 Cheapest Ultrafast Broadband ISPs
  • Gigaclear £15.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • Zzoomm £19.95
    Speed: 150Mbps, Unlimited
    Gift: None
  • YouFibre £19.99
    Speed: 150Mbps, Unlimited
    Gift: None
  • Community Fibre £21.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • BeFibre £21.00
    Speed: 150Mbps, Unlimited
    Gift: £25 Love2Shop Card
Large Availability | Compare More ISPs
Cheapest Superfast ISPs
  • Hyperoptic £17.99
    Speed 33Mbps, Unlimited
    Gift: None
  • UtilityWarehouse £19.99
    Speed 35Mbps, Unlimited (FUP)
    Gift: None
  • NOW £23.00
    Speed 63Mbps, Unlimited
    Gift: None
  • Vodafone £24.00
    Speed 73 - 82Mbps, Unlimited
    Gift: None
  • Shell Energy £24.99
    Speed 38Mbps, Unlimited
    Gift: None
Large Availability | View All
Cheapest Ultrafast ISPs
  • Gigaclear £15.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • Zzoomm £19.95
    Speed: 150Mbps, Unlimited
    Gift: None
  • YouFibre £19.99
    Speed: 150Mbps, Unlimited
    Gift: None
  • Community Fibre £21.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • BeFibre £21.00
    Speed: 150Mbps, Unlimited
    Gift: £25 Love2Shop Card
Large Availability | View All
Helpful ISP Guides and Tips
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
Sponsored Links
The Top 20 Category Tags
  1. FTTP (5411)
  2. BT (3492)
  3. Politics (2499)
  4. Openreach (2279)
  5. Business (2227)
  6. Building Digital UK (2218)
  7. FTTC (2039)
  8. Mobile Broadband (1944)
  9. Statistics (1766)
  10. 4G (1641)
  11. Virgin Media (1596)
  12. Ofcom Regulation (1439)
  13. Wireless Internet (1380)
  14. Fibre Optic (1380)
  15. FTTH (1379)
  16. 5G (1218)
  17. Vodafone (1128)
  18. EE (1113)
  19. TalkTalk (927)
  20. O2 (919)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules