LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Befsr41 | Linksys | 1.35 (including) | 1.35 (including) |
| Befsr41 | Linksys | 1.36 (including) | 1.36 (including) |
| Befsr41 | Linksys | 1.37 (including) | 1.37 (including) |
| Befsr41 | Linksys | 1.38.5 (including) | 1.38.5 (including) |
References
- ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip
- http://www.osvdb.org/1920
- http://www.osvdb.org/5467
- http://www.securityfocus.com/archive/1/201390
- http://www.securityfocus.com/archive/1/203302
- http://www.securityfocus.com/bid/3141
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6949
- ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip
- http://www.osvdb.org/1920
- http://www.osvdb.org/5467
- http://www.securityfocus.com/archive/1/201390
- http://www.securityfocus.com/archive/1/203302
- http://www.securityfocus.com/bid/3141
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6949