PT-2007-2968 · Linksys · Linksys Wrt54G+1

Publicado 2007-03-21 · Atualizado 2018-10-16 · CVE-2007-1585

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linksys WAG200G version 1.01.01 Linksys WRT54GC 2 version 1.00.7 Linksys WRT54GC 1 versions 1.03.0 and earlier

Description The issue allows remote attackers to obtain sensitive information, including passwords and configuration data, by sending a packet to UDP port 916.

Recommendations For Linksys WAG200G version 1.01.01, update the firmware to a version that addresses this issue. For Linksys WRT54GC 2 version 1.00.7, update the firmware to a version that addresses this issue. For Linksys WRT54GC 1 versions 1.03.0 and earlier, update the firmware to a version later than 1.03.0. As a temporary workaround, consider restricting access to UDP port 916 until a patch is available.

Correção

Identificadores relacionados

CVE-2007-1585

Produtos afetados

Linksys Wag200G

Linksys Wrt54G

Referências · 6

• http://secunia.com/advisories/24658 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33251 · Nota
• http://marc.info/?l=bugtraq&m=117492736903388&w=2 · Nota
• http://securityfocus.com/archive/1/463342/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1585 · Nota de Segurança
• http://securityfocus.com/bid/23063 · Nota