Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41449 - http://www.debian.org/security/2008/dsa-1534 - http://secunia.com/advisories/29547 - http://sla.ckers.org/forum/read.php?10%2C20033 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 - http://www.mozilla.org/security/announce/2008/mfsa2008-16.html
CVE ID: CVE-2008-1239 State: REJECTED Published: 2021-06-11T21:28:38 Last Updated: 2021-06-11T21:28:38 Description: No description available.
CVE ID: CVE-2008-1240 State: PUBLISHED Published: 2008-03-28T01:00:00 Last Updated: 2024-08-07T08:17:34.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine. NOTE: this is closely related to CVE-2008-1195. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://secunia.com/advisories/3
0/threaded - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://secunia.com/advisories/29645 - http://www.vupen.com/english/advisories/2008/1793/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41458 - http://secunia.com/advisories/29558 - http://secunia.com/advisories/29526 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg0000
ories/29558 - http://secunia.com/advisories/29526 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.mozilla.org/security/announce/2008/mfsa2008-18.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://www.securityfocus.com/bid/28448 - http://www.debian.org/security/2008/dsa-1534 - http://secunia.com/advisories/29547 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1241 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:33.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.mozilla.org/security/announce/2008/mfsa2008-19.html - http://secunia.com/advisories/30620 - http://
s/29539 - http://www.mozilla.org/security/announce/2008/mfsa2008-19.html - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://secunia.com/advisories/29607 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11163 - http://www.vupen.com/english/advisories/2008/1793/references - http://secunia.com/advisories/29558 - http://rhn
A11163 - http://www.vupen.com/english/advisories/2008/1793/references - http://secunia.com/advisories/29558 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://www.securitytracker.com/id?1019700 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - http://www.debian.org/security/2008/dsa-1534 - http://secunia.com/advisories/29547 - https://exchange.xforce.ibmcloud.com/vulner
ww.debian.org/security/2008/dsa-1534 - http://secunia.com/advisories/29547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41454 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1242 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than CVE-2005-3802. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com
009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41120 - http://www.securityfocus.com/bid/28317 - http://secunia.com/advisories/29345
CVE ID: CVE-2008-1243 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndns_domain parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://code.bulix.org/cx46qa-65489 - https://exchange.xforce.ibmcloud.com/vulnerabilit
jects/router-hacking-challenge/ - http://code.bulix.org/cx46qa-65489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41121 - http://code.bulix.org/koom78-65490
CVE ID: CVE-2008-1244 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns1_1, dns1_2, dns1_3, and dns1_4 parameters. NOTE: it was later reported that F5D7632-4V6 with firmware 6.01.08 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-
ces: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://bugzilla.mozilla.org/show_bug.cgi?id=371598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41124 - http://www.securityfocus.com/bid/28319 - http://secunia.com/advisories/29345
CVE ID: CVE-2008-1245 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.securityfocus.com/bid/28322 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/411
http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41116 - http://secunia.com/advisories/29345
CVE ID: CVE-2008-1246 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2025-01-17T15:14:14.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties, including one who works for the vendor, have been unable to reproduce the flaw unless the enable password is blank Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/a
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.securityfocus.com/archive/1/486959 - http://www.securityfocus.com/bid/27457 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/archive/1/487579 - http://www.securityfocus.com/archive/1/487051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41129 - http://hackathology.blogspot.com/2008/01/pixasa-finesse-71-72-privilege.html - http://www.securityfocus.com/archive/1/486938
CVE ID: CVE-2008-1247 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20
) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://secunia.com/advisories/29344 - http://kinqpinz.info/lib/wrt54g/own.txt - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/28381 - https://kinqpinz.info/lib/wrt54g/ - https://www.exploit-db.com/exploits/5926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41118 - https://kinqpinz.info/lib/wrt54g/own2.txt - ht
loits/5926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41118 - https://kinqpinz.info/lib/wrt54g/own2.txt - https://www.exploit-db.com/exploits/5313
CVE ID: CVE-2008-1248 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41171 - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/
CVE ID: CVE-2008-1249 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crash and corruption of call logs) via a "'); (double quote, quote, close parenthesis, semicolon) sequence in the "Call a number" field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/
CVE ID: CVE-2008-1250 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://secunia.com/advisories/28938 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com
cunia.com/advisories/28938 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/27767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40500
CVE ID: CVE-2008-1251 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40499 - http://secunia.com/advisories/28938 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/2776
/advisories/28938 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/27767
CVE ID: CVE-2008-1252 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/28382 - http://secunia.com/advisories/29414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41128
CVE ID: CVE-2008-1253 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/28439 - http://secunia.com/advisories/29530 - https
rojects/router-hacking-challenge/ - http://www.securityfocus.com/bid/28439 - http://secunia.com/advisories/29530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41117
CVE ID: CVE-2008-1254 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the "bannedlist" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41111
CVE ID: CVE-2008-1255 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41114 - http://www.gnucitizen.org/projects/router-hacking-challenge/
CVE ID: CVE-2008-1256 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41108
CVE ID: CVE-2008-1257 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41109
CVE ID: CVE-2008-1258 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41122 - http://www.securityfocus.com/bid/28439 - http://secunia.com/advisories/29531
CVE ID: CVE-2008-1259 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41112
CVE ID: CVE-2008-1260 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware allow remote attackers to (1) make the admin web server available on the Internet (WAN) interface via the WWWAccessInterface parameter to Forms/RemMagWWW_1 or (2) change the IP whitelisting timeout via the StdioTimout parameter to Forms/rpSysAdmin_1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/
tainer: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41170
CVE ID: CVE-2008-1261 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41113
CVE ID: CVE-2008-1262 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.securityfocus.com/bid/28122 - http://www.gnucitizen.org/projects/router-hacking-challen
9009/100/0/threaded - http://www.securityfocus.com/bid/28122 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41052 - http://www.kb.cert.org/vuls/id/248372 - http://www.0x000000.com/?i=524 - http://www.vupen.com/english/advisories/2008/0802/references - http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820 - http://airspan4wimax.googlepages.com/ - http://secunia.com/advisories/29265
CVE ID: CVE-2008-1263 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41115
CVE ID: CVE-2008-1264 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41126