First published: Mon Mar 10 2008(Updated: )
The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linksys WRT54G | =7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2008-1268 is considered high due to the lack of authentication verification in the FTP server.
To fix CVE-2008-1268, update the firmware of the Linksys WRT54G to the latest version that addresses this vulnerability.
CVE-2008-1268 allows remote attackers to access the FTP server without valid credentials, potentially leading to unauthorized data access.
CVE-2008-1268 specifically affects the Linksys WRT54G version 7 routers running firmware version 7.00.1.
Yes, CVE-2008-1268 can be exploited remotely since it allows attackers to establish an FTP session without proper authentication.