text_combined: rob flickenger roboreillynetcom friday august 9 2002 1112 foundstone labs wrote information leakage vulnerability exists orinoco compaq oem access points disclosing unique snmp community string result attacker query community string gain ability change system configuration including wired equivalent privacy wep keys domain name service dns information think missing point bit yes query snmp community string yes default pw mention essid last 5 characters default wep key theyre easily changed indeed highly recommended manual anyone changes default settings would vulnerable particular snmp probe course cant account end user stupidity thats beyond scope advisory vendor response vendors notified issue july 8th 2002 according orinoco residential gateway line discontinued ive also heard second hand good authority rg line alive well hence recent rg1100 upcoming 80211a version rob fri 9 aug 2002 150333 0700 vulnwatch foundstone labs advisory information leakage orinoco compaq access points