PT-2008-2860 · Linksys · Linksys Wrt54G

Publicado 2008-03-10 · Atualizado 2018-10-11 · CVE-2008-1268

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linksys WRT54G version 7.00.1

Description The issue concerns the FTP server on the router, which fails to properly verify authentication credentials. This allows remote attackers to establish an FTP session by sending any username and password.

Recommendations For version 7.00.1, update the firmware to a version that includes a fix for this issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-1268

Produtos afetados

Linksys Wrt54G

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41119 · Nota
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota
• http://swbae.egloos.com/1701135 · Nota
• http://gnucitizen.org/projects/router-hacking-challenge · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1268 · Nota de Segurança