Belkin F5D7230-4 Wireless G Router 'setup_dns.exe' Authentication Vulnerability

Bugtraq ID:	28319
Class:	Access Validation Error
CVE:	CVE-2008-1244
Remote:	Yes
Local:	No
Published:	Mar 01 2008 12:00AM
Updated:	Nov 13 2008 04:14PM
Credit:	loftgaia
Vulnerable:	Belkin F5D8233-4v3 0 Belkin F5D7632-4V6 Wireless G Router (firmware) 6.1.8 Belkin F5D7230-4 Wireless G Router (firmware) 9.1.10
Not Vulnerable:

Belkin F5D7230-4 Wireless G Router 'setup_dns.exe' Authentication Vulnerability

The Belkin F5D7230-4 Wireless G Router is prone to a vulnerability because of a lack of authentication when users access 'cgi-bin/setup_dns.exe'.

Attackers can exploit this issue to perform administrative functions without authorization.

Belkin F5D7230-4 running firmware 9.01.10 is vulnerable; other devices and firmware versions may also be affected.

Belkin F5D7230-4 Wireless G Router 'setup_dns.exe' Authentication Vulnerability

Attackers can exploit this issue using readily available networking utilities.

The following example URI is available:
Configure the router's primary DNS server: /cgi-bin/setup_dns.exe?dns1_1=192&dns1_2=168&dns1_3=2&dns1_4=2

The following exploit code is available:

• /data/vulnerabilities/exploits/28319.html

Belkin F5D7230-4 Wireless G Router 'setup_dns.exe' Authentication Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Belkin F5D7230-4 Wireless G Router 'setup_dns.exe' Authentication Vulnerability

References:

• Belkin Homepage (Belkin)
  
• F5D7230-4 Wireless G Router Product Page (Belkin)
  
• Hacking SOHO Routers (SourceSec)
  
• The Router Hacking Challenge is Over! (Petko D. Petkov )