Linksys WRT54G Router World Accessible Remote Administration Service Weakness

Bugtraq ID:	10441
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 31 2004 12:00AM
Updated:	May 31 2004 12:00AM
Credit:	Discovery of this weakness is credited to "Alan W. Rateliff, II" <[email protected]>.
Vulnerable:	Sveasoft Samadhi2 2.0.8 .6sv Linksys WRT54G v2.0 2.0 0.8 (Firmware) Linksys WPC300N - Wireless-N Notebook Adapter 4.100.15.5
Not Vulnerable:	Linksys WRT54G v2.0 2.0 2.8 beta(Firmware)

Linksys WRT54G Router World Accessible Remote Administration Service Weakness

A weakness is reported to affect the Linksys WRT54G appliance. It is reported that the web based administration service is published to the WAN interface of the appliance, even when the remote administration functionality is disabled.

Linksys WRT54G Router World Accessible Remote Administration Service Weakness

There is no exploit required.

Linksys WRT54G Router World Accessible Remote Administration Service Weakness

Solution:
The vendor has released a beta version (2.02.8) of the Firmware to address this issue:


Linksys WRT54G v2.0 2.0 0.8 (Firmware)

• Linksys wrt54g_2.02.8_US_code_beta.zip
  ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip

Linksys WRT54G Router World Accessible Remote Administration Service Weakness

References:

• Firmware Upgrade For WRT54G - Wireless-G Broadband Router v2 (Linksys)
  
• Sveasoft Homepage (Sveasoft)
  
• WRT54G Product Page (Linksys)
  
• Additional information on WRT54G administration page ("Alan W. Rateliff, II" )
  
• LinkSys WRT54G administration page availble to WAN ("Alan W. Rateliff, II" )
  
• The Linksys WRT54G "security problem" doesn't exist ("David Pipe" )