MacMusic  |  PcMusic  |  440 Software  |  440 Forums  |  440TV  |  Zicos
strcpy
Recherche

Did you hear the one about Cisco routers using strcpy insecurely for login authentication? Makes you go AAAAA-AAAAAAArrg *segfault*

vendredi 1 mars 2019, 19:02 , par TheRegister
RV110W, RV130W, RV215W need patching to close remote hijacking bug
Cisco has patched three of its RV-series routers after Pen Test Partners (PTP) found them using hoary old C function strcpy insecurely in login authentication function. The programming blunder can be exploited to potentially hijack the devices.…
go.theregister.com/feed/www.theregister.co.uk/2019/03/01/cisco_cve_2019_1663_strcpy_login_authentica...
News copyright owned by their original publishers | Copyright © 2004 - 2024 Zicos / 440Network
Date Actuelle
ven. 1 nov. - 10:35 CET