Alcatel Lucent 8008: reset Web Management password.

[unlikely]

The phone doesn't recognize the new password just changed and accepted!

We currently have an alcatel pbx with several analog phones and few ip phones 8008. The support from the supplier of this system is almost zero and we have some issue with these 8008 phones.

While investigating and searching for alternatives solutions, I accesed the web management of phones. I was asked to change the default password 123456 and to input a complex password.

Now the phones doesn't recognize the new password and not even the default password: they says invalid credentials.

On the only remaining phone with unchanged password, I tried again: login, password change, and immediately tried to change password from within the same login session, always pasting the same password: it say invalid password.

I suspect there is someting wrong with the $ contained in the the new password I used: it likely trigger some parsing/storing bug. The $ is not listed in invalid characters.

Do you have an idea on how I can recover web access to the phones?

Edit: It's definitely some kind of wrong handling of the $ sign in the password. On the only remaining accessible 8008 I tried replacing the $ with a _ or a dot and this password is recognized. It very bad because the web management says nothing about $ ("Your password can't contain " or ' or ( or ) or ` or < or > or a Space or | or & or ^ or { or }").

[Veit_privat]

Not having had a 8008 phone, but can if the web interface passes arguments unescaped to a shell, maybe something like

Code: Select all

echo "part1$part2"
part1

would happen?

[unlikely]

Yes, that was the issue. I figured out later but forgot to update the post.