Denial of Service Problems with Linksys Products
by Berislav Kucan - Monday, 25 November 2002.
Through the iDEFENSE vulnerability contributor program, Alex S. Harasic disclosed information on denial of service problem in several Linksys products. The products include:
  • BEFW11S4, Wireless Access Point Router with 4-Port Switch - Version 2
  • BEFSR11, EtherFast Cable/DSL Router
  • BEFSR41, EtherFast Cable/DSL Router with 4-Port Switch
  • BEFSRU31, EtherFast Cable/DSL Router with USB and 3-Port Switch
The BEFW11S4, BEFSR11, BEFSR41 and BEFSRU31 units can be crashed when several thousand characters are passed in the password field of the device's web management interface. Exploitation simply requires the use of a web browser that can send long Basic Authentication fields to the affected router's interface.

Linksys released firmware update (1.43.3) which can be downloaded from http://www.linksys.com/download/.

In a related post to the BugTraq mailing list, Seth Bromberger noted that Linksys confirmed that the same problem also affects BEFVP41, BEFSX41, BEFSR81, BEFN2PS4 and HPRO200. Vulnerable versions for this additional products include releases later than 1.42.7 (2.42.7 for the BEFSR81 unit).

Linksys support added: "Until the updated firmware is released, we recommend that users downgrade the firmware to an earlier release, or minimize the risk of an attack by disabling remote management of the device."

Spotlight

Almost 1 in 10 Android apps are now malware

Posted on 28 July 2014.  |  Cheetah Mobile Threat Research Labs analyzed trends in mobile viruses for Q1 and Q2 of 2014. Pulling 24.4 million sample files they found that 2.2 million files had viruses. This is a 153% increase from the number of infected files in 2013.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Jul 29th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //