DD-WRT Warning!!!

[blueadept]

As reported at www.miw0rm.com there is a vulnerability in the http-server for the DD-WRT management GUI that can be used for execution of an exploit to gain control over the router.

See full article here:

http://www.dd-wrt.com/dd-wrtv3/communit ... eport.html

To fix the vulnerability add these lines to your firewall in dd-wrt

insmod ipt_webstr
ln -s /dev/null /tmp/exec.tmp
iptables -D INPUT -p tcp -m tcp -m webstr --url cgi-bin -j REJECT --reject-with tcp-reset
iptables -I INPUT -p tcp -m tcp -m webstr --url cgi-bin -j REJECT --reject-with tcp-reset

[steroids]

As reported at www.miw0rm.com there is a vulnerability in the http-server for the DD-WRT management GUI that can be used for execution of an exploit to gain control over the router.

See full article here:

http://www.dd-wrt.com/dd-wrtv3/communit ... eport.html

To fix the vulnerability add these lines to your firewall in dd-wrt

insmod ipt_webstr
ln -s /dev/null /tmp/exec.tmp
iptables -D INPUT -p tcp -m tcp -m webstr --url cgi-bin -j REJECT --reject-with tcp-reset
iptables -I INPUT -p tcp -m tcp -m webstr --url cgi-bin -j REJECT --reject-with tcp-reset

Note: The exploit can only be used directly from outside your network over the internet if you have enabled remote Web GUI management in the Administration tab.

[netdata]

Typo on that URL it is milw0rm.com

good info


a lot of us already knew about this, but its good you point it out here