[VulnDiscuss] ADSL Routers and Sasser

Dear all,
I have noticed a considerable increase in what appears to be DoS attacks
on BT Routers. (For those of you not in the UK, BT pretty much own the
xDSL market over here)
Almost all ADSL installations in the UK have a BT branded Efficient
Networks 5861 ADSL Router. 
A bugtraq post on 10th January
(http://seclists.org/lists/bugtraq/2003/Jan/0069.html) details a DoS
attack caused by a simple port scan. 
My limited understanding of the Sasser worm and it's variants leads me
to believe that upon infection, a machine then sends a SYN packet to a
random IP address (52% of the time). This I believe, is causing
widespread denial of service attacks to UK ADSL customers. BT deny all
knowledge of any problems, and the engineers have not been informed of a
firmware update at this time.
If anyone can prove me wrong or shed any more light on the subject I
would be grateful for your comments.
 
Regards,
Greg.
 
________________________________

Greg Gillies
Chartered Information Systems Practitioner <http://www.pondgroup.com/> 
Director
Pond Group Limited

Tel:      +44 (0)20 8466 6043
Fax:     +44 (0)20 8460 9604
Email:  [email protected]
Web:   www.pondgroup.com <http://www.pondgroup.com/> 

This email is confidential and may be protected by legal privilege. If
you are not the intended recipient, do not copy or disclose its content,
but contact the sender immediately.  Whilst we run antivirus software on
all internet emails we are not liable for any loss or damage.  The
recipient is advised to run their own antivirus software.
 
________________________________