Linksys Wireless-G ADSL Gateway WAG54GS Setup.CGI Cross-Site Scripting Vulnerabilities
BID:24682
Info
Linksys Wireless-G ADSL Gateway WAG54GS Setup.CGI Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 24682 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3574 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2007 12:00AM |
| Updated: | Nov 21 2007 12:34AM |
| Credit: | Petko Petkov and Adrian Pastor are credited with the discovery of this vulnerability. |
| Vulnerable: |
Linksys Wireless-G ADSL Gateway WAG54GS 1.0.6 (Firmware) |
| Not Vulnerable: | |
Discussion
Linksys Wireless-G ADSL Gateway WAG54GS Setup.CGI Cross-Site Scripting Vulnerabilities
Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
Attackers may exploit this issue by enticing victims into opening a malicious URI.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may help the attacker steal cookie-based authentication credentials, cause denial-of-service conditions, and launch other attacks.
Successful exploits will allow script code to be stored persistently in the affected device.
Linksys Wireless-G ADSL Gateway WAG54GS running firmware V1.00.06 is reported vulnerable.
Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
Attackers may exploit this issue by enticing victims into opening a malicious URI.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may help the attacker steal cookie-based authentication credentials, cause denial-of-service conditions, and launch other attacks.
Successful exploits will allow script code to be stored persistently in the affected device.
Linksys Wireless-G ADSL Gateway WAG54GS running firmware V1.00.06 is reported vulnerable.
Exploit / POC
Linksys Wireless-G ADSL Gateway WAG54GS Setup.CGI Cross-Site Scripting Vulnerabilities
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following exploit URI is available.
NOTE: This exploit will cause the Administration page to become inaccessible until the hardware is reset.
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following exploit URI is available.
NOTE: This exploit will cause the Administration page to become inaccessible until the hardware is reset.
Solution / Fix
Linksys Wireless-G ADSL Gateway WAG54GS Setup.CGI Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected]
References
Linksys Wireless-G ADSL Gateway WAG54GS Setup.CGI Cross-Site Scripting Vulnerabilities
References:
References: