Test ID:	1.3.6.1.4.1.25623.1.0.13636
Category:	Web application abuses
Title:	Linksys Wireless Internet Camera File Disclosure
Summary:	The Linksys Wireless Internet Camera contains a CGI that allows remote; attackers to disclosue sensitive files stored on the server.
Description:	Summary: The Linksys Wireless Internet Camera contains a CGI that allows remote attackers to disclosue sensitive files stored on the server. Vulnerability Impact: An attacker may use this CGI to disclosue the password file and from it the password used by the root use (the MD5 value). Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2508 BugTraq ID: 10533 http://www.securityfocus.com/bid/10533 Bugtraq: 20040613 Linksys Web Camera Cross-site Scripting Vuln (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-06/0215.html http://securitytracker.com/id?1010424 http://secunia.com/advisories/11881 XForce ISS Database: linksys-webcamera-main-xss(16415) https://exchange.xforce.ibmcloud.com/vulnerabilities/16415
Copyright	Copyright (C) 2004 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.