Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2007-5384

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2007-5384
Last Modified 05 Sep 2008 05:30:38
Published 11 Oct 2007 09:17:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2007-5384

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistance HTTPS session on TCP port 51003. NOTE: an authentication bypass can be leveraged to exploit this in the absence of an existing administrative session. NOTE: SpeedTouch 780 might also be affected by some of these issues.

Vulnerable Systems


References

MISC - http://www.theregister.co.uk/2007/10/09/bt_home_hub_vuln/

BID - 25972

BUGTRAQ - 20071008 BT Home Flub: Pwnin the BT Home Hub

MISC - http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub

SREASON - 3213


Last Updated: 27 May 2016 10:46:10