Wed Oct 21 08:44:33 2020
EVENTS
 FREE
SOFTWARE
INSTITUTE

POLITICS
JOBS
MEMBERS'
CORNER

MAILING
LIST

NYLXS Mailing Lists and Archives
NYLXS Members have a lot to say and share but we don't keep many secrets. Join the Hangout Mailing List and say your peice.

DATE 2019-06-01

HANGOUT

2020-10-21 | 2020-09-21 | 2020-08-21 | 2020-07-21 | 2020-06-21 | 2020-05-21 | 2020-04-21 | 2020-03-21 | 2020-02-21 | 2020-01-21 | 2019-12-21 | 2019-11-21 | 2019-10-21 | 2019-09-21 | 2019-08-21 | 2019-07-21 | 2019-06-21 | 2019-05-21 | 2019-04-21 | 2019-03-21 | 2019-02-21 | 2019-01-21 | 2018-12-21 | 2018-11-21 | 2018-10-21 | 2018-09-21 | 2018-08-21 | 2018-07-21 | 2018-06-21 | 2018-05-21 | 2018-04-21 | 2018-03-21 | 2018-02-21 | 2018-01-21 | 2017-12-21 | 2017-11-21 | 2017-10-21 | 2017-09-21 | 2017-08-21 | 2017-07-21 | 2017-06-21 | 2017-05-21 | 2017-04-21 | 2017-03-21 | 2017-02-21 | 2017-01-21 | 2016-12-21 | 2016-11-21 | 2016-10-21 | 2016-09-21 | 2016-08-21 | 2016-07-21 | 2016-06-21 | 2016-05-21 | 2016-04-21 | 2016-03-21 | 2016-02-21 | 2016-01-21 | 2015-12-21 | 2015-11-21 | 2015-10-21 | 2015-09-21 | 2015-08-21 | 2015-07-21 | 2015-06-21 | 2015-05-21 | 2015-04-21 | 2015-03-21 | 2015-02-21 | 2015-01-21 | 2014-12-21 | 2014-11-21 | 2014-10-21 | 2014-09-21 | 2014-08-21 | 2014-07-21 | 2014-06-21 | 2014-05-21 | 2014-04-21 | 2014-03-21 | 2014-02-21 | 2014-01-21 | 2013-12-21 | 2013-11-21 | 2013-10-21 | 2013-09-21 | 2013-08-21 | 2013-07-21 | 2013-06-21 | 2013-05-21 | 2013-04-21 | 2013-03-21 | 2013-02-21 | 2013-01-21 | 2012-12-21 | 2012-11-21 | 2012-10-21 | 2012-09-21 | 2012-08-21 | 2012-07-21 | 2012-06-21 | 2012-05-21 | 2012-04-21 | 2012-03-21 | 2012-02-21 | 2012-01-21 | 2011-12-21 | 2011-11-21 | 2011-10-21 | 2011-09-21 | 2011-08-21 | 2011-07-21 | 2011-06-21 | 2011-05-21 | 2011-04-21 | 2011-03-21 | 2011-02-21 | 2011-01-21 | 2010-12-21 | 2010-11-21 | 2010-10-21 | 2010-09-21 | 2010-08-21 | 2010-07-21 | 2010-06-21 | 2010-05-21 | 2010-04-21 | 2010-03-21 | 2010-02-21 | 2010-01-21 | 2009-12-21 | 2009-11-21 | 2009-10-21 | 2009-09-21 | 2009-08-21 | 2009-07-21 | 2009-06-21 | 2009-05-21 | 2009-04-21 | 2009-03-21 | 2009-02-21 | 2009-01-21 | 2008-12-21 | 2008-11-21 | 2008-10-21 | 2008-09-21 | 2008-08-21 | 2008-07-21 | 2008-06-21 | 2008-05-21 | 2008-04-21 | 2008-03-21 | 2008-02-21 | 2008-01-21 | 2007-12-21 | 2007-11-21 | 2007-10-21 | 2007-09-21 | 2007-08-21 | 2007-07-21 | 2007-06-21 | 2007-05-21 | 2007-04-21 | 2007-03-21 | 2007-02-21 | 2007-01-21 | 2006-12-21 | 2006-11-21 | 2006-10-21 | 2006-09-21 | 2006-08-21 | 2006-07-21 | 2006-06-21 | 2006-05-21 | 2006-04-21 | 2006-03-21 | 2006-02-21 | 2006-01-21 | 2005-12-21 | 2005-11-21 | 2005-10-21 | 2005-09-21 | 2005-08-21 | 2005-07-21 | 2005-06-21 | 2005-05-21 | 2005-04-21 | 2005-03-21 | 2005-02-21 | 2005-01-21 | 2004-12-21 | 2004-11-21 | 2004-10-21 | 2004-09-21 | 2004-08-21 | 2004-07-21 | 2004-06-21 | 2004-05-21 | 2004-04-21 | 2004-03-21 | 2004-02-21 | 2004-01-21 | 2003-12-21 | 2003-11-21 | 2003-10-21 | 2003-09-21 | 2003-08-21 | 2003-07-21 | 2003-06-21 | 2003-05-21 | 2003-04-21 | 2003-03-21 | 2003-02-21 | 2003-01-21 | 2002-12-21 | 2002-11-21 | 2002-10-21 | 2002-09-21 | 2002-08-21 | 2002-07-21 | 2002-06-21 | 2002-05-21 | 2002-04-21 | 2002-03-21 | 2002-02-21 | 2002-01-21 | 2001-12-21 | 2001-11-21 | 2001-10-21 | 2001-09-21 | 2001-08-21 | 2001-07-21 | 2001-06-21 | 2001-05-21 | 2001-04-21 | 2001-03-21 | 2001-02-21 | 2001-01-21 | 2000-12-21 | 2000-11-21 | 2000-10-21 | 2000-09-21 | 2000-08-21 | 2000-07-21 | 2000-06-21 | 2000-05-21 | 2000-04-21 | 2000-03-21 | 2000-02-21 | 2000-01-21 | 1999-12-21

Key: Value:

Key: Value:

MESSAGE
DATE 2019-06-22
FROM Ruben Safir
SUBJECT Subject: [Hangout - NYLXS] On Linksys WAG54G2 1.00.10 devices
From hangout-bounces-at-nylxs.com Sat Jun 22 21:53:37 2019
Return-Path:
X-Original-To: archive-at-mrbrklyn.com
Delivered-To: archive-at-mrbrklyn.com
Received: from www2.mrbrklyn.com (www2.mrbrklyn.com [96.57.23.82])
by mrbrklyn.com (Postfix) with ESMTP id D7310161132;
Sat, 22 Jun 2019 21:52:43 -0400 (EDT)
X-Original-To: hangout-at-nylxs.com
Delivered-To: hangout-at-nylxs.com
Received: from [10.0.0.62] (www.mrbrklyn.com [96.57.23.83])
by mrbrklyn.com (Postfix) with ESMTP id BC20B161132
for ; Sat, 22 Jun 2019 21:52:13 -0400 (EDT)
From: Ruben Safir
To: Hangout
Message-ID: <24562f19-64ca-4359-fb62-f1ad75ead120-at-mrbrklyn.com>
Date: Sat, 22 Jun 2019 21:50:32 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
Thunderbird/60.7.0
MIME-Version: 1.0
Content-Language: en-US
Subject: [Hangout - NYLXS] On Linksys WAG54G2 1.00.10 devices
X-BeenThere: hangout-at-nylxs.com
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: NYLXS Tech Talk and Politics
List-Unsubscribe: ,

List-Post:
List-Help:
List-Subscribe: ,

Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: hangout-bounces-at-nylxs.com
Sender: "Hangout"

https://nvd.nist.gov/vuln/detail/CVE-2009-5157

Current Description

On Linksys WAG54G2 1.00.10 devices, there is authenticated command
injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable.

Source: MITRE
Hide Analysis Description
Analysis Description

On Linksys WAG54G2 1.00.10 devices, there is authenticated command
injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable.

Source: MITRE
Impact
CVSS v3.0 Severity and Metrics:

Base Score: 8.8 HIGH
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (V3 legend)
Impact Score: 5.9
Exploitability Score: 2.8

Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): High
Integrity (I): High
Availability (A): High
CVSS v2.0 Severity and Metrics:

Base Score: 9.0 HIGH
Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C) (V2 legend)
Impact Subscore: 10.0
Exploitability Subscore: 8.0

Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (AU): Single
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete
Additional Information:
Allows unauthorized disclosure of information
Allows unauthorized modification
Allows disruption of service
References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have
provided these links to other web sites because they may have
information that would be of interest to you. No inferences should be
drawn on account of other sites being referenced, or not, from this
page. There may be other web sites that are more appropriate for your
purpose. NIST does not necessarily endorse the views expressed, or
concur with the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on these sites.
Please address comments about this page to nvd-at-nist.gov.
Hyperlink Resource
https://www.securityfocus.com/archive/1/503934 Exploit Third Party
Advisory VDB Entry
https://www.securityfocus.com/bid/35142 Third Party Advisory VDB Entry
Technical Details

Vulnerability Type (View All)

Command Injection (CWE-77)

Known Affected Software Configurations Switch to CPE 2.2
Configuration 1 ( hide )
cpe:2.3:o:linksys:wag54g2_firmware:1.00.10:*:*:*:*:*:*:*
Show Matching CPE(s)
Running on/with
cpe:2.3:h:linksys:wag54g2:-:*:*:*:*:*:*:*
Show Matching CPE(s)


--
So many immigrant groups have swept through our town
that Brooklyn, like Atlantis, reaches mythological
proportions in the mind of the world - RI Safir 1998
http://www.mrbrklyn.com
DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002

http://www.nylxs.com - Leadership Development in Free Software
http://www.brooklyn-living.com

Being so tracked is for FARM ANIMALS and extermination camps,
but incompatible with living as a free human being. -RI Safir 2013
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout

  1. 2019-06-03 NCPA eCommunications <ncpa.ecommunications-at-ncpanet.org> Subject: [Hangout - NYLXS] Alabama, Illinois,
  2. 2019-06-02 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #410 - Are you a blogger?
  3. 2019-06-03 From: "PSSNY" <jamie.cullis-at-pssny.org> Subject: [Hangout - NYLXS] Contact your Senator and Assemblymember Today!
  4. 2019-06-03 NYOUG <execdir-at-nyoug.org> Subject: [Hangout - NYLXS] Upcoming Events for Oracle Professionals
  5. 2019-06-02 IEEE Engineering in Medicine and Biology Society <noreply-at-embs.org> Subject: [Hangout - NYLXS] Reminder: EMBS News and Events
  6. 2019-06-03 From: "Free Software Foundation" <info-at-fsf.org> Subject: [Hangout - NYLXS] Free Software Supporter Issue 134, June 2019
  7. 2019-06-04 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Data and Privacu wars with facebook
  8. 2019-06-05 Ruben Safir <ruben.safir-at-my.liu.edu> Subject: [Hangout - NYLXS] Fwd: Fireside Chat: President and CEO of the New
  9. 2019-06-05 From: "American Museum of Natural History" <fieldtrips-at-amnh.org> Subject: [Hangout - NYLXS] Earn 45 hours of CTLE credit this summer at the
  10. 2019-06-05 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Pharmacy Finances
  11. 2019-06-11 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Its a jungle out there
  12. 2019-06-10 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #411 - Perl 5.30 was released
  13. 2019-06-11 From: "Virtual Jerusalem" <vjhighlights-at-members.virtualjerusalem.com> Subject: [Hangout - NYLXS] The Situation In Israel is Urgent!
  14. 2019-06-11 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Fwd: Tomorrow: Join us at "Red Hat Enterprise
  15. 2019-06-12 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] 1984 again
  16. 2019-06-12 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Fwd: [users-at-httpd] ApacheCon North America 2019
  17. 2019-06-12 From: "Mancini, Sabin (DFS)" <Sabin.Mancini-at-dfs.ny.gov> Re: [Hangout - NYLXS] Fwd: Tomorrow: Join us at "Red Hat
  18. 2019-06-12 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Fwd: Tomorrow: Join us at "Red Hat Enterprise
  19. 2019-06-11 IEEE Spectrum <deliver-at-ieee.org> Subject: [Hangout - NYLXS] The Institute Alert
  20. 2019-06-12 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] facial recongition
  21. 2019-06-13 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Fwd: [dinosaur] Full scholarships available for
  22. 2019-06-14 From: "Mancini, Sabin (DFS)" <Sabin.Mancini-at-dfs.ny.gov> Re: [Hangout - NYLXS] went to the Red Hat Linux presentation at
  23. 2019-06-16 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Internet destruction to Nationalism and Despots
  24. 2019-06-14 From: "APhA - American Pharmacists Association" <infocenter-at-aphanet.org> Subject: [Hangout - NYLXS] Information from Industry: Thinking GLP-1
  25. 2019-06-15 James E Keenan <jkeenan-at-pobox.com> Subject: [Hangout - NYLXS] ny.pm: July 1 social meeting
  26. 2019-06-16 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Anti-semitism on Artix
  27. 2019-06-13 From: "American Museum of Natural History" <learn-at-amnh.org> Subject: [Hangout - NYLXS] Register for an Online Science Course for
  28. 2019-06-16 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #412 - The Perl Conference in
  29. 2019-06-20 From: =?utf-8?Q?Zo=C3=AB_Kooyman=2C_FSF?= <info-at-fsf.org> Subject: [Hangout - NYLXS] Double the movement: Inspire someone to explore
  30. 2019-06-22 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] On Linksys WAG54G2 1.00.10 devices
  31. 2019-06-24 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #413 - 2 events done, 2 to go
  32. 2019-06-24 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Attacking Jews is now OK in NYC
  33. 2019-06-26 From: "American Museum of Natural History" <publicprograms-at-amnh.org> Subject: [Hangout - NYLXS] 2019 Tony Award-Winning Director Rachel Chavkin
  34. 2019-06-30 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #414 - Do you want to learn Test

NYLXS are Do'ers and the first step of Doing is Joining! Join NYLXS and make a difference in your community today!