Belkin F5D8233-4 Wireless N Router IP-Based Authentication Session Hijacking Vulnerability

Bugtraq ID:	32273
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 12 2008 12:00AM
Updated:	Nov 14 2008 05:24PM
Credit:	Craig Heffner, Derek Yap from SourceSec
Vulnerable:	Belkin F5D8233-4v3 0
Not Vulnerable:

Belkin F5D8233-4 Wireless N Router IP-Based Authentication Session Hijacking Vulnerability

The Belkin F5D8233-4F5D7230-4 Wireless G Router is prone to an authentication-bypass vulnerability because it uses IP-based authentication.

Attackers can exploit this issue to gain access to affected routers using the account of a previously authenticated user. Attackers can leverage this issue to obtain sensitive information that can aid in further attacks.

Belkin F5D8233-4 is vulnerable; other devices may also be affected.

Belkin F5D8233-4 Wireless N Router IP-Based Authentication Session Hijacking Vulnerability

Attackers can exploit this issue using readily available networking utilities.

Belkin F5D8233-4 Wireless N Router IP-Based Authentication Session Hijacking Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Belkin F5D8233-4 Wireless N Router IP-Based Authentication Session Hijacking Vulnerability

References:

• Belkin Homepage (Belkin)
  
• Hacking SOHO Routers (SourceSec)