PT-2003-2209 · D Link+1 · D-Link Di-614++1

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1264

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Longshine Wireless Access Point (WAP) LCS-883R-AC-B (affected versions not specified) D-Link DI-614+ version 2.0

Description The issue allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication. This is due to a flaw in the TFTP server.

Recommendations For Longshine Wireless Access Point (WAP) LCS-883R-AC-B, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For D-Link DI-614+ version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-1264

Produtos afetados

D-Link Di-614+

Longshine Wireless Access Point

Referências · 6

• 🔥 http://securityfocus.com/archive/1/305391 · Exploit
• 🔥 http://securityfocus.com/archive/1/305344 · Exploit
• http://securityfocus.com/bid/6533 · Nota
• http://iss.net/security_center/static/10997.php · Nota
• http://securitytracker.com/id?1005897 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1264 · Nota de Segurança