Derrick 'dman' Hudson wrote:

> They don't even need to do that.  All that is needed is for you to
> view a maliciously crafted HTML page.  If you don't have javascript
> enabled then you would need to click on a link or submit a form as
> well.

Okay. So that's an argument for changing the router's address from the
default 192.168.1.1.

> I just found out about the vulnerability yesterday.

It first appeared on bugtraq on 18 Nov 2002. Whether that counts as
"old news" or not is a matter of opinion, I suppose.

Craig

Attachment: msg18516/pgp00000.pgp
Description: PGP signature

Reply via email to