Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Linksys WRT54 GL - Session riding (CSRF) Jan 15 2008 06:08PM
Daniel Weber (dweber calyptix com)

> The catch is that this exploit don't work unnoticed, because the admin
> get notification in the browser that there has occured an error with the
> cerificate ["Unable to verify the identity of Linksys as a trusted
> site"] and he has explicity allow it. In other words first he has to
> allow to ...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus