CVE-2007-4389

CVE-2007-4389 affects 2wire gateways (models 1701HG, 1800HW, 2071) with firmware 3.17.5, 3.7.1, and 5.29.51. A CSRF flaw in /xslt allows remote attackers to create DNS mappings as administrators, enabling DNS poisoning via NAME and ADDR parameters. The sources describe the affected products and t...