full-disclosure - Re: [FD] Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface

Open Source and information security mailing list archives

Message-ID: <CAAAPD15dcx0CGYJxG3uUgMsdReS5pQEZHUn4_uJ_X+TMuzedRw@mail.gmail.com>
Date: Sun, 6 Apr 2014 11:23:37 -0300
From: Palula Brasil <palulabrasil@...il.com>
To: coderman <coderman@...il.com>
Cc: Full Disclosure <fulldisclosure@...lists.org>
Subject: Re: [FD] Reflected Cross-Site Scripting within the ASUS RT-AC68U
 Managing Web Interface

"fun; i keep waiting for these vulns to get old, but it's just still
funny, every time!"

And seems to me that not all XSS vulnerabilities are being dealt with
in an extensive manner. So, albeit dealing with this specific
vulnerability in 5 days, looks like ASUS is dealing with XSS
vulnerabilities on a one-by-one methodology... So I believe there are
more XSS vulnerabilities to be discovered in that same web management
interface.

On Sun, Apr 6, 2014 at 7:00 AM, coderman <coderman@...il.com> wrote:
> On Fri, Apr 4, 2014 at 11:08 AM, Palula Brasil <palulabrasil@...il.com> wrote:
>>...
>>   Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface
>> ...
>> * Impact: This vulnerability allows for performing attacks against third party
>>           users of the ASUS RT-AC68U web management platform, by luring them
>>           into clicking on a link provided with malicious content, which in
>>           turn, will execute on the context of the victim's browser.
>
> fun; i keep waiting for these vulns to get old, but it's just still
> funny, every time!
>
> best regards,
>
>
>
> p.s. see also: "How I Hacked Your Router"
>   http://disconnected.io/2014/03/18/how-i-hacked-your-router/
>
> "Security Flaws in Universal Plug and Play: Unplug, Don't Play"
>  https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
>
> "DNS Cache Poisoning Issue ("Kaminsky bug") (CVE-2008-1447)"
>
> these tales of woe go on in consumer internet of buggy things -i-verse
> for eons.  thus i need say no more. *grin*
>
>
>
> more of this story: try to break your hardware before it gets broken;
> if you can't make it not break under known methods, build/install
> something better!  [you can install Tomato on a RT-AC68U with
> functional Tor transproxy and administration via ssh only, as just one
> example.]

-- 
Palula Brasil

palulabrasil*SPAM*gmail.com
24E5 3ED3 E77C F868 805D
F843 E156 6DB8 49FB 8B40

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives