CVE-2002-1069 Information

Description

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm (2) Device Status or (3) Device Information.

Reference

http://marc.info/?l=bugtraq&m=103004834131542&w=2 http://online.securityfocus.com/archive/1/288584 http://www.iss.net/security_center/static/9967.php http://www.iss.net/security_center/static/9969.php http://www.securityfocus.com/bid/5544 http://www.securityfocus.com/bid/5553