CVE-2003-1264 Information

Description

TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B and in D-Link DI-614+ 2.0 which is based on it allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication.

Reference

http://www.iss.net/security_center/static/10997.php http://www.securityfocus.com/archive/1/305344 http://www.securityfocus.com/archive/1/305391 http://www.securityfocus.com/bid/6533 http://www.securitytracker.com/id?1005897