Описание
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2014-7858
- http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2015/May/125
- http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
- http://www.securityfocus.com/archive/1/535626/100/200/threaded
- http://www.securityfocus.com/bid/74886
Связанные уязвимости
CVSS3: 9.8
nvd
больше 8 лет назад
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
fstec
больше 11 лет назад
Уязвимость функции check_login микропрограммного обеспечения маршрутизатора D–Link DNR-326, позволяющая нарушителю обойти процедуру аутентификации