exploits , vulnerabilities , articles , BT Home Hub and Thomson/Alcatel Speedtouch 7G Multiple Vulnerabilities

Title	BT Home Hub and Thomson/Alcatel Speedtouch 7G Multiple Vulnerabilities
Published	2007-10-08-12:00AM
Updated	2008-01-22-04:18PM
Class	Design Error
CVE	CVE-2007-6003 E-2007-5383CV 2007-5384CVE- 07-5385
Remote	Yes
Local	No
Credit	GNUCITIZEN, Adrian Pastor, and pdp are credited with discovering these issues.
Vulnerable	BT Home Hub 6.2.6 .B BT Home Hub 6.2.2.6 BT Home Hub 0 Alcatel Speedtouch 7G
Not Vulnerable
Code	The following exploit code is available through GNUCitizen: http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub-4UPDATE (January 10, 2008) - The cross-site scripting issue can be leveraged to perform unauthorized actions via UPnP. Please see the Bugtraq message entitled "BT Home Flub: Pwnin the BT Home Hub (5) - exploiting IGDs remotely via UPnP" in the references section for further information.UPDATE (January 21, 2008) - The following proof-of-concept URI is available; please see the referenced "Call Jacking: Phreaking the BT Home Hub" webpage for further information:POST http://www.example.com/cgi/b/_voip_/stats//?ce=1&be=0&l0=-1&l1=-1&name=0=30&1=00390669893461
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-08-21 Microsoft PowerPoint List Value Parsing Remote Code Execution Vulnerability
• 2008-08-20 Neon Digest Authentication Null Pointer Exception Denial Of Service Vulnerability
• 2008-08-20 Yelp Invalid URI Format String Vulnerability
• 2008-08-20 Linux Kernel Memory Copy Exception Local Information Disclosure Vulnerability
• 2008-08-18 HP System Management Homepage (SMH) for Linux and Windows Cross Site Scripting Vulnerability
• 2008-08-18 RETIRED: mktemp Predictable Temporary Filename Vulnerability
• 2008-08-18 Freeway Multiple Input Validation Vulnerabilities
• 2008-08-18 Nokia 6131 Multiple Vulnerabilities
• 2008-08-18 Drupal Remote Vulnerabilities
• 2008-08-18 VidiScript Remote File Upload Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 21 Aug 2008 02:02:44 +0000