Secunia

Ralph Moonen has reported a vulnerability and some weaknesses in IP3 Networks NA75, which can be exploited by malicious, local users to potentially gain escalated privileges and disclose or manipulate sensitive information, or by malicious people to conduct SQL injection attacks.

1) Some input passed in the web interface is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Example:
* The password field during login.

2) Some input validation errors in the command line interface can be exploited to inject arbitrary shell commands via the "`" backtick character.

3) The shadow password file has world-readable permissions, which can be exploited to disclose other users' encrypted passwords.

4) The database file is stored with world-readable and world-writable permissions.

The vulnerability and weaknesses have been reported in firmware version 4.0.34. Other versions may also be affected.

Solution
Apply patch available from the vendor.
Further details available in Customer Area

Provided and/or discovered by
Ralph Moonen

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area