CVE-2007-4915
- State
- Published
- Severity
- Not scored
- Published
- Sep 17, 2007
- Updated
- Aug 7, 2024
- Reserved
- Sep 17, 2007
Description
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.securenetwork.it/ricerca/advisory/download/SN-2007-02.txt
- 20080301 The Router Hacking Challenge is Over!mailing-list
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- 3151third-party-advisory
- http://www.ikkisoft.com/stuff/SN-2007-02.txt
- 4542exploit
- 25676vdb-entry
- 20070913 Boa (with Intersil Extensions) - HTTP Basic Authentication Bypassmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.