meathive has reported a vulnerability in Linksys WRT54G, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to improper authorization checks when performing administrative actions via the web interface. This can be exploited to perform restricted actions by directly accessing
Basic.tri, factdefa.tri, manage.tri, WBasic.tri, WFilter.tri, dmz.tri, ddns.tri, WanMac.tri, AdvRoute.tri, Advanced.tri, fw.tri, vpn.tri, filter.tri, PortRange.tri, ptrigger.tri, qos.tri, ctlog.tri, ping.tri, tracert.tri, or rstatus.tri.

The vulnerability is reported in firmware version 1.00.9. Other versions may also be affected.

Solution
Install updated firmware versions.
Further details available in Customer Area

Provided and/or discovered by
meathive

Original Advisory
http://kinqpinz.info/lib/wrt54g/own.txt

Deep Links
Links available in Customer Area