Description
LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
References
- 20010802 Advisory Update: Design Flaw in Linksys EtherFast 4-Port mailing-list
- 3141 vdb-entry
- 5467 vdb-entry
- linksys-etherfast-reveal-passwords(6949) vdb-entry
- 1920 vdb-entry
- 20010810 Linksys router security fix mailing-list