CVE

Id
31644  
CVE No.
CVE-2008-1527  
Status
Candidate  
Description
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.  
Phase
Assigned (20080325)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
340017 31644 CVE-2008-1527 BUGTRAQ:20080301 The Router Hacking Challenge is Over!  View
340018 31644 CVE-2008-1527 URL:http://www.securityfocus.com/archive/1/archive/1/489009/100/0/threaded  View
340019 31644 CVE-2008-1527 MISC:http://www.gnucitizen.org/projects/router-hacking-challenge/  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48960 JVNDB-2008-004270 lighttpd の connections.c におけるサービス運用妨害 (DoS) の脆弱性 lighttpd の connection_state_machine 関数 (connections.c) は、サービス運用妨害 (アクティブ SSL 接続の損失) 状態となる脆弱性が存在します。 CVE-2008-1531 31644 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004270.html  View