CVE - CVE-2006-3561

CVE-ID
CVE-2006-3561	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as configuration information via (1) /btvoyager_getconfig.sh, PPP credentials via (2) btvoyager_getpppcreds.sh, and decode configuration credentials via (3) btvoyager_decoder.c.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:19057 URL:http://www.securityfocus.com/bid/19057 BUGTRAQ:20060716 Unauthenticated access to BT Voyager config file and PPP credentials embedded in HTML form URL:http://www.securityfocus.com/archive/1/440405/100/0/threaded BUGTRAQ:20080301 The Router Hacking Challenge is Over! URL:http://www.securityfocus.com/archive/1/489009/100/0/threaded FULLDISC:20060708 Unauthenticated access to BT Voyager config file URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047733.html MISC:http://ikwt.dyndns.org/projects/btvoyager-getconfig.txt MISC:http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-3/ MISC:http://www.gnucitizen.org/projects/router-hacking-challenge/ SECUNIA:20982 URL:http://secunia.com/advisories/20982 VUPEN:ADV-2006-2734 URL:~~http://www.vupen.com/english/advisories/2006/2734~~ (Obsolete source) XF:btvoyager-config-information-disclosure(27652) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/27652
Assigning CNA
MITRE Corporation
Date Record Created
20060712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)