MIPS-CVE-2014-9222

免责声明 本教程仅供信息参考和教育目的。我认为，对于任何使用数字信息和计算机的人来说，伦理黑客、信息安全与网络安全应当是熟悉的主题。我坚信，不了解黑客的攻击方式，就无法有效防御他们。 需求 root@kitploit: $ IDA Pro +7.0（由于 IDA 相当昂贵，你也可以使用 Radar2） $ 运行 Rompager 4.07 的路由器：数量庞大，例如 TP-Link TD-W8951、ZyXEL P-660R、Billion BiPAC 51/52 $ UART 转 USB 转换器 不幸的 Cookie 漏洞已存在一段时间，但公开层面仍缺乏阐述该漏洞技术细节的分析。根据...

misfortune-cookie

CVE-2014-9222 “Misfortune Cookie” PoC 套件 AllegroSoft RomPager 的 HTTP cookie 处理中存在栈溢出（所有版本 ，HTTP Digest 认证 dslf-config:admin；默认命令在 9999 端口开启 telnet 绑定 shell。 C Mikr...

MIPS-CVE-2014-9222

免责声明 本教程仅供信息参考和教育目的。我认为，任何使用数字信息和计算机的人都应该熟悉道德黑客、信息安全及网络安全的相关知识。我相信，不了解黑客的手法，就无法有效防御黑客攻击。 前提条件 root@kitploit: $ IDA Pro +7.0（由于IDA价格昂贵，也可以使用Radar2） $ 运行Rompager 4.07的路由器：数量众多，例如TP-Link TD-W8951、ZyXEL P-660R、Billion BiPAC 51/52 等 $ UART转USB "不幸的饼干"漏洞已存在一段时间，但公开的技术细节分析仍然缺乏。根据Check...

EUVD-2014-9048

Malware in sbrugna...

Allegro RomPager 缓冲区溢出漏洞

AllegroSoft RomPager是美国AllegroSoft公司的一套嵌入式Web服务器工具包，它允许用户使用通用的Web浏览器管理和控制网络打印机、交换机和路由器等网络设备的万维网（WWW）服务。 AllegroSoft RomPager中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务或执行任意代码。 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2014-9223

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...

CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

Buffer overflow

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...

Memory corruption

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

CVE-2014-9223

CVE-2014-9223 is a vulnerability in the RomPager embedded web server used by Huawei Home Gateway devices and other vendors. The issue is a digest authentication buffer overflow in RomPager’s cookie/auth processing, enabling a remote attacker to cause a denial of service and potentially execute ar...

CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

CVE-2014-9222

CVE-2014-9222 corresponds to the Misfortune Cookie vulnerability in Allegro RomPager, affecting RomPager embedded web servers 4.01–4.34 (used in Huawei Home Gateway and Capsule DTS). The flaw allows remote attackers to gain administrator privileges by sending a crafted HTTP cookie that triggers m...

Vulnerability warning: doom cookie Misfortune Cookie vulnerability affects the global 1 2 0 0 million router-vulnerability warning-the black bar safety net

One called“doom cookie Misfortune Cookie”a serious vulnerability is affecting the global 1 2 0 0 million router security, D-Link, TP-Link, Huawei, ZTE and other brands are affected, the attacker can use a vulnerability of remote control devices and monitoring traffic. Learn about the“doom...