Unscored CVE-2002-1069 EUVD-2002-1058GHSA-h6ww-h946-vcvp

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP ad…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information.

References

dlink-admin-device-information(9969) vdb-entry
20020822 possible exploit: D-Link DI-804 unauthorized DHCP release from WAN mailing-list
dlink-admin-dhcp-release(9967) vdb-entry
5553 vdb-entry
20020822 Re: possible exploit: D-Link DI-804 unauthorized DHCP release mailing-list
5544 vdb-entry