DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Last post Author Topic: Homeland Security: Disable UPnP  (Read 22,413 times)

app103

  • That scary taskbar girl
  • Global Moderator
  • Joined in 2006
  • *****
  • Posts: 5,888
    • Participated in NANY Challenge Six Times
    • Coding Snacks
    • Gathering Badge
    • Cody Award
    • Volunteers/Staff
Re: Homeland Security: Disable UPnP
« Reply #25 on: February 03, 2013, 01:20 AM »
Unfortunately, ScanNow requires Java. Kind of ironic to make your system vulnerable one way to find out if you are vulnerable another.  :huh:

Tinman57

  • Duck! It's another MicroSoft Patch!
  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,702
    • Military Service Badge - US Air Force
Re: Homeland Security: Disable UPnP
« Reply #26 on: February 03, 2013, 01:40 AM »
(my fiber connection is 40Mb symetrical).

  YOU
Spoiler (click to show/hide)
DICK!   :P
((((TINMAN))))

tomos

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 11,970
    • Gathering Badge
    • Participated in NANY Challenge Once
Re: Homeland Security: Disable UPnP
« Reply #27 on: February 03, 2013, 01:26 PM »
Unfortunately, ScanNow requires Java. Kind of ironic to make your system vulnerable one way to find out if you are vulnerable another.  :huh:

is the online router scan enough if you're using a stand-alone machine?
http://upnp-check.rapid7.com/

(I have java uninstalled - a check above gets me "Congratulations! Your router did not respond to a UPnP discovery request.")
Tom

f0dder

  • [Well, THAT escalated quickly!]
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
    • Participated in NANY Challenge Once
Re: Homeland Security: Disable UPnP
« Reply #28 on: February 03, 2013, 01:29 PM »
is the online router scan enough if you're using a stand-alone machine?
http://upnp-check.rapid7.com/
Seems like they do a server-side check to your WAN IP - so you'll get to see whether your router is exploitable from the intarwebs (which is what really matters), but you won't get notified about other devices on your LAN.
- carpe noctem

Curt

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 7,565
Re: Homeland Security: Disable UPnP
« Reply #29 on: February 10, 2013, 06:36 PM »
How to fix the UPnP security holes Universal Plug and Play has always had security holes. Here's how to plug them. http://www.zdnet.com/how-to-fix-the-upnp-security-holes-7000010584
thanks for that - unfortunately, it sounds like you've got to be pretty much an expert to figure this stuff out :(
-exactly my thought as well. So I wrote Agnitum, because:
Quote from: ZDNet
So what can you do in the meantime? Just keep that firewall up once and for all against UPnP traffic.
We've survived UPnP until now, maybe all this is not extremely urgent... I hope for an answer no later than Monday.

I forgot to post the answer:

Quote from: Agnitum
Your PC is protected by Outpost default rules:
(Settings - Application rules - svchost.exe - Network rules - block UPnP rule (1900 UDP))

Unfortunately,  Outpost  can´t protect routers as it protects only the PC where the product is installed.

Original address: https://www.donationcoder.com/forum/index.php?topic=33873.0