fkie_cve-2008-1252

b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.

GHSA-67rj-p8cc-475q

b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.

VAR-200803-0175

b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source. Speedport W500 is prone to an information-disclosure vulnerability. Exploiting this issue may allow an unauthenticated remote attacker to retrieve sensitive information that may lead to further attacks. ----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched.

Download and test it today: https://psi.secunia.com/

Read more about this new version: https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE: Speedport W500 b_banner.stm Password Disclosure

SECUNIA ADVISORY ID: SA29414

VERIFY ADVISORY: http://secunia.com/advisories/29414/

CRITICAL: Moderately critical

IMPACT: Security Bypass

WHERE: >From local network

OPERATING SYSTEM: T-Com Speedport W500 http://secunia.com/product/18002/

DESCRIPTION: A vulnerability has been reported in the Speedport W500 router, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to the login page (b_banner.stm) containing the password in plain text, which can be exploited to disclose the password and bypass the login mechan…

Most recent entries from all

fkie_cve-2008-1252

GHSA-67rj-p8cc-475q

gsd-2008-1252

VAR-200803-0175