Root gap in free routing firmware dd WRT

2010-09-25

Nextiva is a cloud based VoIP phone system, hosting lots of small and medium sized businesses nationwide. the provides UNLIMITED business calling for only $19.95 a month!! Click here for the detail about this promotion!!

heise Security message of 22.07.2009 14:51 Quotation:

The administrative surface of the free routing firmware dd WRT possesses a gap, which it aggressors permitted to start on rout programs with root rights in the current stable version. On milw0rm and in the dd WRT forum described gap is based on the missing treatment of Metazeichen with the Query stringer in Dd-WRTs Web server httpd. This implements even programs if nobody is announced.

Source and further here...

Jo, a luck we have our customer routing on all:

1) Tomato drauf
2) Main line train reef (if at all) only by HTTPS & IP filter on our celebrations IP from the office

- Matthias