Lucene search

[email protected]CVE-2005-1680

HistoryMay 25, 2005 - 4:00 a.m.

CVE-2005-1680

2005-05-2504:00:00

[email protected]

web.nvd.nist.gov

d-link

dsl

authentication bypass

cgi

firmwarecfg

remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.2%

JSON

D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or (2) if their request is the first, which causes /var/tmp/fw_ip to be created and contain their IP address.

Affected configurations

NVD

Node

d-linkdsl-502t

d-linkdsl-504t

d-linkdsl-562t

d-linkdsl-g604t

CPENameOperatorVersion
d-link:dsl-502td-link dsl-502teq*
d-link:dsl-504td-link dsl-504teq*
d-link:dsl-562td-link dsl-562teq*
d-link:dsl-g604td-link dsl-g604teq*

CPE	Name	Operator	Version
d-link:dsl-502t	d-link dsl-502t	eq	*
d-link:dsl-504t	d-link dsl-504t	eq	*
d-link:dsl-562t	d-link dsl-562t	eq	*
d-link:dsl-g604t	d-link dsl-g604t	eq	*

References

marc.info/?l=bugtraq&m=111652806030943&w=2

www.vupen.com/english/advisories/2005/0573

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.2%

JSON

Related for CVE-2005-1680

nvd1 cvelist1 securityvulns1