Description
The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/489009/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/436281/100/0/threaded ↗
- http://www.gnucitizen.org/projects/router-hacking-challenge/ ↗
- http://secunia.com/advisories/20474 ↗
- http://www.securityfocus.com/bid/18299 ↗
- http://securitytracker.com/id?1016234 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26973 ↗
- http://www.intruders.com.br/adv0206en.html ↗
- http://www.intruders.org.br/adv0206en.html ↗
- http://securityreason.com/securityalert/1064 ↗
- http://www.vupen.com/english/advisories/2006/2186 ↗