linksys54g-bypass.txt

| l/ l j| \ / \ | \l j| \ | T l j| \ | | / \ | ' / | T | YY Y| o | T | Yl/ | | T | Y| jY Y | \ | | | | || Q || / | | | | || j | | | | || l | O | | Y | | | | || || | | | | | || / | | | | | || | | | . | j l | | |l || | j l | | || || T j l | | || T l ! lj\j|jljj ,jlj |jljjljlj|jljjlj / Hacking the...

Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)

regurgitated by: meathive url: kinqpinz.info ; Tue, 05 Feb 2008 07:51:41 -0700 CVE-2008-1247 WRT54G firmware version: v1.00.9 Default LAN IP: 192.168.1.1 Default auth: user:blank - pass:admin Authorization: Basic OmFkbWlu php print base64decode"OmFkbWlu"; :admin https://kinqpinz.info/lib/wrt54g/...

CVE-2008-1247

creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5313...

CVE-2008-1247

CVE-2008-1247 affects Linksys WRT54G firmware 1.00.9. The web interface does not require credentials, allowing remote attackers to perform arbitrary administrative actions via direct requests to multiple .tri endpoints (e.g., Advanced.tri, Basic.tri, fw.tri, rstatus.tri, etc.). Root cause: missin...

CVE-2008-1247

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to 1 Advanced.tri, 2 AdvRoute.tri, 3 Basic.tri, 4 ctlog.tri, 5 ddns.tri, 6 dmz.tri...