PT-2005-2657 · D Link · D-Link Dsl-502T+3

Francesco Orro · Published 2005-05-20 · Updated 2016-10-18 · CVE-2005-1680

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DSL-502T D-Link DSL-504T D-Link DSL-562T D-Link DSL-G604T

Description The issue allows remote attackers to bypass authentication under certain conditions. This can happen in two scenarios: (1) if the attacker's IP address is already present in /var/tmp/fw ip, or (2) if the attacker's request is the first one, which results in the creation of /var/tmp/fw ip containing their IP address. This occurs when the /cgi-bin/firmwarecfg endpoint is executed.

Recommendations For D-Link DSL-502T, consider restricting access to the /cgi-bin/firmwarecfg endpoint until a fix is available. For D-Link DSL-504T, restrict access to the /cgi-bin/firmwarecfg endpoint to prevent unauthorized access. For D-Link DSL-562T, as a temporary workaround, limit the execution of /cgi-bin/firmwarecfg to trusted IP addresses. For D-Link DSL-G604T, avoid using the /cgi-bin/firmwarecfg endpoint until the issue is resolved.

Fix

Related Identifiers

CVE-2005-1680

Affected Products

D-Link Dsl-502T

D-Link Dsl-504T

D-Link Dsl-562T

D-Link Dsl-G604T

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-1680 · Security Note
• http://vupen.com/english/advisories/2005/0573 · Note
• http://marc.info/?l=bugtraq&m=111652806030943&w=2 · Note