3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
BID:11408
Info
3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
| Bugtraq ID: | 11408 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2004 12:00AM |
| Updated: | Oct 13 2004 12:00AM |
| Credit: | Discovery of the information disclosure vulnerability is credited to Karb0nOxyde <[email protected]>. Ivan Casado Ruiz <[email protected]> disclosed the authentication bypass vulnerability. |
| Vulnerable: |
3Com 3CRADSL72 Wireless Router |
| Not Vulnerable: | |
Discussion
3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose sensitive information such as the router name, primary and secondary DNS servers, default gateway. Attackers could also reportedly gain administrative access to the router.
If successful, these vulnerabilities can be used to the launch of other attacks against the device and other users on the vulnerable network.
3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose sensitive information such as the router name, primary and secondary DNS servers, default gateway. Attackers could also reportedly gain administrative access to the router.
If successful, these vulnerabilities can be used to the launch of other attacks against the device and other users on the vulnerable network.
Exploit / POC
3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
No exploit is required.
The following proof of concept is available:
http://www.example.com/app_sta.stm
No exploit is required.
The following proof of concept is available:
http://www.example.com/app_sta.stm
Solution / Fix
3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
References:
References: