CVE-2007-4915| Date: (C)2007-09-17 (M)2017-10-04 |
| |
| CVSS Score: 10.0 | Access Vector: NETWORK |
| Exploitability Subscore: 10.0 | Access Complexity: LOW |
| Impact Subscore: 10.0 | Authentication: NONE |
| | Confidentiality: COMPLETE |
| | Integrity: COMPLETE |
| | Availability: COMPLETE |
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request.
