NetGear WAB102 Wireless Access Point Password Management Vulnerabilities

Bugtraq ID:	9194
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 10 2003 12:00AM
Updated:	Dec 10 2003 12:00AM
Credit:	The disclosure of this issue has been credited to Jon Kamm @hotmail <[email protected]>.
Vulnerable:	NetGear WAB102 Wireless Access Point Firmware 1.2.3
Not Vulnerable:

NetGear WAB102 Wireless Access Point Password Management Vulnerabilities

It has been reported that NetGear WAB102 Wireless Access Point may be prone to multiple password management issues that could allow an attacker to gain access to a vulnerable unit. An attacker may be able to access the unit by supplying any password containing a space. Another issue causes the password to be reset to the default password of '1234' when the unit loses power and is reset.

NetGear WAB102 running firmware version 1.2.3 has been reported to be prone to this issue.

NetGear WAB102 Wireless Access Point Password Management Vulnerabilities

No exploit is required.

NetGear WAB102 Wireless Access Point Password Management Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

NetGear WAB102 Wireless Access Point Password Management Vulnerabilities

References:

• Homepage (Netgear)
  
• NetGear WAB102 ("Jon Kamm @hotmail" )