[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Router ZyXEL Prestige 650 HW http remote admin.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Router ZyXEL Prestige 650 HW http remote admin.
From: Francisco "José" Canela <darkydelphi@xxxxxxxxx>
Date: 21 Nov 2004 22:42:49 -0000


Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote 
Administration active. 

Exploting this bug, the attacker can reset the router configurantion.

The "/rpFWUpload.html" is not password protected. To exploit this bug you only 
need write that:

http://[Router ip]/rpFWUpload.html

and click the Reset button.


Sorry if this post is misspelling... but I'm from Spain and my english level is 
poor...

____________
Francisco José Canela

Follow-Ups:
- Re: Router ZyXEL Prestige 650 HW http remote admin.
  - From: Hugo van der Kooij
- Re: Router ZyXEL Prestige 650 HW http remote admin.
  - From: Steve Clement

Prev by Date: GFHost PHP GMail remote command execution exploit that achieves webserver id privileges
Next by Date: PHPKIT SQL Injection, XSS
Previous by thread: GFHost PHP GMail remote command execution exploit that achieves webserver id privileges
Next by thread: Re: Router ZyXEL Prestige 650 HW http remote admin.
Index(es):
- Date
- Thread