Wednesday, 5 January 2011

Information Disclosure Vulnerability of DD-WRT

According to You are victim of physical attack.
Now easy possible!
On Monday, December 27th, 2010 has a post of DD-WRT Information Disclosure Vulnerability vedio by devttys0. Attacker can access the information about a DD-WRT router and internal clients. The attacker can accessed directly by an unauthenticated. The post show about how to disclosure DD-WRT. It very easy to use a browser and type in the url then information will display. There is a mitigate by disable httpd of DD-WRT router.
Read more from source 1. and source 2 + video.

Take care for anyone who using DD-WRT router.
Hope it help :)

No comments: