CVE-2008-1268

The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-03-10

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Wrt54g (Linksys)

References

• http://swbae.egloos.com/1701135
• http://www.gnucitizen.org/projects/router-hacking-challenge/
• http://www.securityfocus.com/archive/1/489009/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41119