| reply to Stem Bolt
Re: Open-source firmware flaw exposes wireless routers - DD-WRT The issue is in http.c, see the milw0rm exploit which explains the issue in detail:
»www.milw0rm.com/exploits/9209
To further clarify:
quote:
Unlike the already documented CSRF vulnerability ( »www.securityfocus.com/bid/32703 ) this DOES NOT need an authenticated session. This means someone can even post some crafted [img] link on a forum and a dd-wrt router owner visiting the forum will get owned 
The IP address of the router would need to be known as well as the local IPv4 addressing scheme if using RFC1918. |
