Netgear RT314/RT311 Gateway Router Cross-Site Scripting Vulnerability
BID:4024
Info
Netgear RT314/RT311 Gateway Router Cross-Site Scripting Vulnerability
| Bugtraq ID: | 4024 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0238 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2002 12:00AM |
| Updated: | Jul 11 2009 09:56AM |
| Credit: | This vulnerability was submitted to BugTraq on February 3rd, 2002 by "sq" <[email protected]>. |
| Vulnerable: |
NetGear RT314/RT311 Gateway Router Firmware 3.25 NetGear RT314/RT311 Gateway Router Firmware 3.24 NetGear RT314/RT311 Gateway Router Firmware 3.22 |
| Not Vulnerable: | |
Discussion
Netgear RT314/RT311 Gateway Router Cross-Site Scripting Vulnerability
The Netgear RT314/RT311 Gateway Router models allow Cable/DSL users to share a connection. These products provide a web-based administrative interface.
The affected products run a ZyXel-RomPager web server to provide easy web-based configuration.
The web interface for the router is prone to cross-site scripting attacks. This may be exploited by an attacker who knows the internal IP address of the router. Arbitrary script code may be included in a malicious link, which is executed in the browser of the victim, in the context of the router.
It is possible that an attacker may capitalize on this opportunity to gain unauthorized administrative access to the router. This may occur if the attacker can successfully steal cookie-based authentication credentials from a user who has access to the administrative interface.
It should be noted that there is a distinct possibility that any other router products running the ZyXel-RomPager web server (versions 3.02 or earlier) may also be prone to this issue.
This issue reportedly does not affect the Netgear RP114 Cable/DSL Web Safe Router.
The Netgear RT314/RT311 Gateway Router models allow Cable/DSL users to share a connection. These products provide a web-based administrative interface.
The affected products run a ZyXel-RomPager web server to provide easy web-based configuration.
The web interface for the router is prone to cross-site scripting attacks. This may be exploited by an attacker who knows the internal IP address of the router. Arbitrary script code may be included in a malicious link, which is executed in the browser of the victim, in the context of the router.
It is possible that an attacker may capitalize on this opportunity to gain unauthorized administrative access to the router. This may occur if the attacker can successfully steal cookie-based authentication credentials from a user who has access to the administrative interface.
It should be noted that there is a distinct possibility that any other router products running the ZyXel-RomPager web server (versions 3.02 or earlier) may also be prone to this issue.
This issue reportedly does not affect the Netgear RP114 Cable/DSL Web Safe Router.
Exploit / POC
Netgear RT314/RT311 Gateway Router Cross-Site Scripting Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
Netgear RT314/RT311 Gateway Router Cross-Site Scripting Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Netgear RT314/RT311 Gateway Router Cross-Site Scripting Vulnerability
References:
References:
- Netgear Support Page (Netgear)