PT-2004-3497 · Linksys · Linksys Wrt54G+1

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2606

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linksys WRT54G version 2.02.7 Linksys BEFSR41 version 3

Description The issue allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled, by exploiting the Web interface with the firewall disabled.

Recommendations For Linksys WRT54G version 2.02.7, enable the firewall to prevent remote access to the administration web page. For Linksys BEFSR41 version 3, enable the firewall to prevent remote access to the administration web page.

Fix

Related Identifiers

CVE-2004-2606

Affected Products

Linksys Befsr41

Linksys Wrt54G

References · 14

• ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip · Patch
• http://web.archive.org/web/20040823075750/http://linksys.com/download/firmware.asp?fwid=201 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2606 · Security Note
• http://secunia.com/advisories/11754 · Vendor Advisory
• http://securityfocus.com/bid/10441 · Patch
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html · Note
• http://securityfocus.com/archive/1/365175 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16274 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html · Note
• http://securityfocus.com/archive/1/365227/30/0/threaded · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html · Note
• http://nwfusion.com/news/2004/0607confuse.html · Note
• http://osvdb.org/6577 · Note