PT-2001-2260 · Linksys · Linksys Etherfast Befsr41

Published 2001-08-10 · Updated 2017-10-10 · CVE-2001-1117

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LinkSys EtherFast BEFSR41 Cable/DSL routers versions prior to 1.39.3 Beta

Description The issue allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for "index.htm" and "Password.htm".

Recommendations For versions prior to 1.39.3 Beta, update the firmware to version 1.39.3 Beta or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1117

Affected Products

Linksys Etherfast Befsr41

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2001-1117 · Security Note
• http://securityfocus.com/bid/3141 · Vendor Advisory
• http://securityfocus.com/archive/1/203302 · Vendor Advisory
• http://securityfocus.com/archive/1/201390 · Note
• http://osvdb.org/5467 · Note
• ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6949 · Note
• http://osvdb.org/1920 · Note