CVE-2006-3561
- State
- Published
- Severity
- Not scored
- Published
- Jul 13, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jul 12, 2006
Description
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as configuration information via (1) /btvoyager_getconfig.sh, PPP credentials via (2) btvoyager_getpppcreds.sh, and decode configuration credentials via (3) btvoyager_decoder.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20080301 The Router Hacking Challenge is Over!mailing-list
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-3/
- 19057vdb-entry
- 20060716 Unauthenticated access to BT Voyager config file and PPP credentials embedded in HTML formmailing-list
- 20060708 Unauthenticated access to BT Voyager config filemailing-list
- ADV-2006-2734vdb-entry
- btvoyager-config-information-disclosure(27652)vdb-entry
- 20982third-party-advisory
- http://ikwt.dyndns.org/projects/btvoyager-getconfig.txt
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.