Belkin F5D7230-4 Wireless G Router IP-Based Authentication State Authentication Bypass Vulnerability

Bugtraq ID:	28317
Class:	Access Validation Error
CVE:	CVE-2008-1242
Remote:	Yes
Local:	No
Published:	Mar 19 2008 12:00AM
Updated:	Mar 19 2008 06:10PM
Credit:	loftgaia is credited with the discovery of this issue.
Vulnerable:	Belkin F5D7230-4 Wireless G Router (firmware) 9.1.10
Not Vulnerable:

Belkin F5D7230-4 Wireless G Router IP-Based Authentication State Authentication Bypass Vulnerability

The Belkin F5D7230-4 Wireless G Router is prone to an authentication-bypass vulnerability because of the way it maintains authentication states.

Attackers can exploit this issue to gain access to affected routers using the account of a previously authenticated user.

Belkin F5D7230-4 running firmware 9.01.10 is vulnerable; other devices and firmware versions may also be affected.

Belkin F5D7230-4 Wireless G Router IP-Based Authentication State Authentication Bypass Vulnerability

Attackers can exploit this issue using readily available networking utilities.

Belkin F5D7230-4 Wireless G Router IP-Based Authentication State Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Belkin F5D7230-4 Wireless G Router IP-Based Authentication State Authentication Bypass Vulnerability

References:

• F5D7230-4 Wireless G Router Product Page (Belkin)
  
• The Router Hacking Challenge is Over! (Petko D. Petkov )