Atheria SV-SIP1042 Administrator Authentication Credentials Information Disclosure Vulnerability

Bugtraq ID:	33214
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 12 2009 12:00AM
Updated:	Jan 15 2009 04:52PM
Credit:	SmoKe
Vulnerable:	Aethra SV-SIP1042 1.4.18
Not Vulnerable:

Atheria SV-SIP1042 Administrator Authentication Credentials Information Disclosure Vulnerability

Atheria SV-SIP1042 is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to the administrator's user-authentication credentials. Successful exploits may allow the attacker to gain unauthorized administrative access to the affected device.

Atheria SV-SIP1042 1.4.18 is vulnerable; other versions may also be affected.

Atheria SV-SIP1042 Administrator Authentication Credentials Information Disclosure Vulnerability

Attackers can use Advanced Serial Port Monitor to exploit this issue.

Atheria SV-SIP1042 Administrator Authentication Credentials Information Disclosure Vulnerability

Solution:
Reports indicate that the vendor has fixed this issue. Please see the references for more information.

Atheria SV-SIP1042 Administrator Authentication Credentials Information Disclosure Vulnerability

References:

• SV-SIP1042 Homepage (Aethra)
  
• Hack Aethra SV 1042 Adsl/Voip Router (SmoKe )