| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <BAY19-F3E15F3692B0B91F36756CA7EF0@phx.gbl> Date: Sat, 18 Nov 2006 00:42:03 +0000 From: "Ginsu Rabbit" <ginsurabbit@...mail.com> To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk Subject: linksys wrt54g v5 authentication bypass fixed About the authentication bypass vulnerability in certain linksys routers: http://www.securityfocus.com/archive/1/442452/30/0/threaded Linksys has silently patched the authentication bypass vulnerability. There is still no fix for the CSRF vulnerability. The fixed firmware revision is 1.00.10. Note that WRT54G v4 and earlier linksys routers are based on different hardware and different firmware than the v5 and later routers. If you have a v4 or earlier router, this vulnerability doesn't affect you. If you have v5 or later, it's time to patch. -- GR _________________________________________________________________ Get the latest Windows Live Messenger 8.1 Beta version. Join now. http://ideas.live.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists