CVE-2017-14426

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices have 0644 /var/etc/shadow aka the /etc/shadow symlink target permissions...

CVE-2017-14426

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices have 0644 /var/etc/shadow aka the /etc/shadow symlink target permissions...

CVE-2017-14426

CVE-2017-14426 affects D-Link DIR-850L, Rev. A (firmware through FW114WWb07_h2ab_beta1) and Rev. B (through FW208WWb02). The issue is that the file /var/etc/shadow (the target of the /etc/shadow symlink) has permissions 0644. This is described as an information exposure/vector permitting access t...