dreambox

------=_Part_11826_26808459.1198778486866
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

it was brought to efnet admins attention that dreambox machines with
default password ('dreambox' or empty password) can be utilized much
the same way cisco routers with default passwords.

attached is a patch for 3.1.3 to scan for these dreambox machines using:
protocol DREAMBOX:23;
in config.

my diff skills aren't the greatest, nor is my familiarity with the
bopm source code, so you'll need --ignore-whitespaces to apply the
patch, and i got an error when compiling config-lexer.c which was
fixed with `touch src/config-lexer.l && make`

Gavin

-- 
In God we trust,
Everyone else must have an x.509 certificate.

------=_Part_11826_26808459.1198778486866
Content-Type: text/plain; name=bopm-3.1.3+dreambox.diff
Content-Transfer-Encoding: base64
X-Attachment-Id: f_faplooxe0
Content-Disposition: attachment; filename=bopm-3.1.3+dreambox.diff
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------=_Part_11826_26808459.1198778486866--