DD-WRT Site Survey SSID Script Injection Vulnerability
BID:30573
Info
DD-WRT Site Survey SSID Script Injection Vulnerability
| Bugtraq ID: | 30573 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 06 2008 12:00AM |
| Updated: | Aug 06 2008 10:16PM |
| Credit: | Rafael Dominguez-Vega <[email protected]> |
| Vulnerable: |
DD-WRT DD-WRT v24 |
| Not Vulnerable: |
DD-WRT DD-WRT v24.sp1 |
Discussion
DD-WRT Site Survey SSID Script Injection Vulnerability
DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface.
Attackers can exploit this issue to execute arbitrary script code in the DD-WRT web interface.
Versions prior to DD-WRT 24-sp1 are vulnerable.
DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface.
Attackers can exploit this issue to execute arbitrary script code in the DD-WRT web interface.
Versions prior to DD-WRT 24-sp1 are vulnerable.
Exploit / POC
DD-WRT Site Survey SSID Script Injection Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
DD-WRT Site Survey SSID Script Injection Vulnerability
Solution:
The vendor released v24-sp1 to address this issue. Please see the references for details.
Solution:
The vendor released v24-sp1 to address this issue. Please see the references for details.
References
DD-WRT Site Survey SSID Script Injection Vulnerability
References:
References:
- DD-WRT v24 SP1 (DD-WRT)
- Vendor Homepage (DD-WRT)