ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-09-14T04:00:00Z

Updated: 2024-09-16T22:56:41.082Z

Reserved: 2005-09-14T00:00:00Z

Link: CVE-2005-2914

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2005-09-14T21:03:00.000

Modified: 2008-09-05T20:52:58.890

Link: CVE-2005-2914

cve-icon Redhat

No data.