PT-2008-2860 · Linksys · Linksys Wrt54G

Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1268

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linksys WRT54G version 7.00.1

Description The issue concerns the FTP server on the router, which fails to properly verify authentication credentials. This allows remote attackers to establish an FTP session by sending any username and password.

Recommendations For version 7.00.1, update the firmware to a version that includes a fix for this issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-1268

Affected Products

Linksys Wrt54G

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-1268 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41119 · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://swbae.egloos.com/1701135 · Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note