Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)

regurgitated by: meathive url: kinqpinz.info ; Tue, 05 Feb 2008 07:51:41 -0700 CVE-2008-1247 WRT54G firmware version: v1.00.9 Default LAN IP: 192.168.1.1 Default auth: user:blank - pass:admin Authorization: Basic OmFkbWlu php print base64decode"OmFkbWlu"; :admin https://kinqpinz.info/lib/wrt54g/...

Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)

Linksys WRT54G Firmware 1.00.9 - Security Bypass 1 regurgitated by: meathive url: kinqpinz.info ; Tue, 05 Feb 2008 07:51:41 -0700 CVE-2008-1247 WRT54G firmware version: v1.00.9 Default LAN IP: 192.168.1.1 Default auth: user:blank - pass:admin Authorization: Basic OmFkbWlu php print...

linksys-bypass.txt

regurgitated by: meathive url: kinqpinz.info ; Tue, 05 Feb 2008 07:51:41 -0700 CVE-2008-1247 WRT54G firmware version: v1.00.9 Default LAN IP: 192.168.1.1 Default auth: user:blank - pass:admin Authorization: Basic OmFkbWlu php print base64decode"OmFkbWlu"; :admin https://kinqpinz.info/lib/wrt54g/...

Linksys WRT54G无线路由器多个绕过认证漏洞

No description provided by source...

Linksys WRT54g authentication bypass

Configuration changes are applied without authentication through Web interface...

[SA29344] Linksys WRT54G Security Bypass Vulnerability

TITLE: Linksys WRT54G Security Bypass Vulnerability SECUNIA ADVISORY ID: SA29344 VERIFY ADVISORY: http://secunia.com/advisories/29344/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network OPERATING SYSTEM: Linksys WRT54G Wireless-G Broadband Router...

Design/Logic Flaw

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to 1 Advanced.tri, 2 AdvRoute.tri, 3 Basic.tri, 4 ctlog.tri, 5 ddns.tri, 6 dmz.tri...

CVE-2008-1265

The Linksys WRT54G router allows remote attackers to cause a denial of service device restart via a long username and password to the FTP interface...

CVE-2008-1268

The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password...

Information disclosure

The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI...

CVE-2008-1264

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

Default credentials

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

CVE-2008-1247

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to 1 Advanced.tri, 2 AdvRoute.tri, 3 Basic.tri, 4 ctlog.tri, 5 ddns.tri, 6 dmz.tri...

Default credentials

The Linksys WRT54G router allows remote attackers to cause a denial of service device restart via a long username and password to the FTP interface...

CVE-2008-1263

The CVE-2008-1263 issue concerns the Linksys WRT54G router, where passwords and keys are stored in cleartext in the Config.bin file. The underlying problem is that an HTTP request to the top-level Config.bin URI may allow remote authenticated users to obtain sensitive information. The available d...

CVE-2008-1264

CVE-2008-1264 affects the Linksys WRT54G router. The issue is the default FTP password/passwordless-like access using “admin,” which permits remote access to sensitive files (including nvram.cfg, a file listing all HTML documents, and an ELF executable). The available documents describe the vulne...

CVE-2008-1247

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to 1 Advanced.tri, 2 AdvRoute.tri, 3 Basic.tri, 4 ctlog.tri, 5 ddns.tri, 6 dmz.tri...

CVE-2008-1265

The CVE-2008-1265 issue affects the Linksys WRT54G router. A remote attacker can trigger a denial of service (device restart) by sending an excessively long username and password to the FTP interface. The available sources confirm the vulnerability mechanism and impact, but do not provide exploit...

CVE-2008-1265

The Linksys WRT54G router allows remote attackers to cause a denial of service device restart via a long username and password to the FTP interface...

CVE-2008-1268

The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password...