PT-2004-3497 · Linksys · Linksys Wrt54G+1

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2606

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linksys WRT54G version 2.02.7 Linksys BEFSR41 version 3

Description The issue allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled, by exploiting the Web interface with the firewall disabled.

Recommendations For Linksys WRT54G version 2.02.7, enable the firewall to prevent remote access to the administration web page. For Linksys BEFSR41 version 3, enable the firewall to prevent remote access to the administration web page.

Correção

Identificadores relacionados

CVE-2004-2606

Produtos afetados

Linksys Befsr41

Linksys Wrt54G

Referências · 14

• ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip · Correção
• http://web.archive.org/web/20040823075750/http://linksys.com/download/firmware.asp?fwid=201 · Correção
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html · Nota
• http://securityfocus.com/archive/1/365175 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16274 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html · Nota
• http://securityfocus.com/archive/1/365227/30/0/threaded · Nota
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2606 · Nota de Segurança
• http://secunia.com/advisories/11754 · Aviso do Fabricante
• http://nwfusion.com/news/2004/0607confuse.html · Nota
• http://osvdb.org/6577 · Nota
• http://securityfocus.com/bid/10441 · Correção