Security Problem on LinkStation Live with Bittorrent

[wondy]

   Hi, I am found a serious security bug also on new firmware 1.06. Is possible to see the bittorrent page on everyone simply typing the linkstation ip address follows by port 8080 WITHOUT ENTER ANY PASSWORD !!And if you have a problem to find a valid IP address , buffalo will help you :-) with the DNS service buffalonas.com, in this way you can digit www.buffalonas.com/user:8080 to enter in a bittorrent page of everyone and see what is in download , to schedule a new downloads , ecc .... with privacy problem that it brings.

[Colin137]

Thank you for notifying us of the problem, we will work hard to get the fixed firmware ASAP.

 

As a temporary workaround, disable the bittorrent function, or simply ensure that port 8080 is blocked by your router's firewall.

Message Edited by Colin137 on 01-24-2009 06:12 PM

[Almamida]

   

Yes, it would be great to secure this access using accounts created in linkstation.

With the possibility to manage who can access to it, and who can't. Like the shared folders in WebAccess.

 

:) 

[SilverFoX]

   

Colin137 wrote:

Thank you for notifying us of the problem, we will work hard to get the fixed firmware ASAP.

 

As a temporary workaround, disable the bittorrent function, or simply ensure that port 8080 is blocked by your router's firewall.

Message Edited by Colin137 on 01-24-2009 06:12 PM

just as a side  note - this was mentioned as a security flaw since the firmware 1.01 (i think) and hasn´t been fixed since then - so as a temporary workaround the bittorrent function didn´t work from the start to follow your advice -.-

anyways - looking forward to a fix also for the private tracker support :)

 

regards,

SilverFoX

 

PS: please check the following thread as well if you are interested in the linkstation live with bittorrent support:

http://forums.buffalotech.com/buffalo/board/message?board.id=0101&thread.id=3095" target="_blank">Persisting problems and feature suggestions regarding LinkStation Live with BitTorrent (LS-CH*L)

Message Edited by SilverFoX on 01-25-2009 04:55 AM