Multiple Router Vendor Remote IRC Denial Of Service Vulnerability

TITLE: Multiple Router Vendor Remote IRC Denial Of Service Vulnerability
CLASS: Failure to Handle Exceptional Conditions
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: Mar 04 2006 12:00AM
UPDATE: Mar 08 2006 09:25PM
CREDIT: ryanmeyer14@netscape.net discovered this issue. Both ryanmeyer14@netscape.net and "Cade Cairns" <cairnsc@gmail.com> disclosed this issue.
VULNERABLE:

NetGear WGT624 0
NetGear RT314/RT311 Gateway Router Firmware 3.25
NetGear RT314/RT311 Gateway Router Firmware 3.24
NetGear RT314/RT311 Gateway Router Firmware 3.22
NetGear RT-338
NetGear ME102 1.4
NetGear ME102 1.3
NetGear FVS318v2 2.4
NetGear FVS318 2.4
NetGear FVS318 1.3
NetGear FVS318 1.2
NetGear FVS318 1.1
NetGear FVS318 1.0
NetGear FM114P
NetGear DG834G
NetGear DG834 ADSL Firewall Router
Linksys WRT54GS 4.70.6 (Firmware)
Linksys WRT54GS 4.50.6 (Firmware)
Linksys WRT54G v4.0 4.20.6 (Firmware)
Linksys WRT54G v4.0 4.0.7 (Firmware)
Linksys WRT54G v3.0 3.3.6 (Firmware)
Linksys WRT54G v3.0 3.1.3 (Firmware)
Linksys WRT54G v2.0 2.4.4 (Firmware)
Linksys WRT54G v2.0 2.0 2.8 beta(Firmware)
Linksys WRT54G v2.0 2.0 0.8 (Firmware)
Linksys WRT54G v1.0 1.42.3 (Firmware)
Linksys WAP55AG 1.0.7
Linksys WAP11 2.2
Linksys WAP11 1.4
Linksys WAP11 1.3
Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.42.7
Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.40.3
Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.9 b
Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 b
Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2
Linksys EtherFast BEFVP41 Router 1.39.64
Linksys EtherFast BEFVP41 Router
Linksys EtherFast BEFSRU31 Router 1.44
Linksys EtherFast BEFSRU31 Router 1.43.3
Linksys EtherFast BEFSRU31 Router 1.43
Linksys EtherFast BEFSRU31 Router 1.42.7
Linksys EtherFast BEFSRU31 Router 1.42.3
Linksys EtherFast BEFSRU31 Router 1.41
Linksys EtherFast BEFSRU31 Router 1.40.2
Linksys EtherFast BEFSR81 Router 2.44
Linksys EtherFast BEFSR81 Router 2.42.7
Linksys EtherFast BEFSR81 Router
Linksys EtherFast BEFSR41 Router 1.45.7
Linksys EtherFast BEFSR41 Router 1.44
Linksys EtherFast BEFSR41 Router 1.43.3
Linksys EtherFast BEFSR41 Router 1.43
Linksys EtherFast BEFSR41 Router 1.42.7
Linksys EtherFast BEFSR41 Router 1.42.3
Linksys EtherFast BEFSR41 Router 1.41
Linksys EtherFast BEFSR41 Router 1.40.2
Linksys EtherFast BEFSR41 Router 1.39
Linksys EtherFast BEFSR41 Router 1.38
Linksys EtherFast BEFSR41 Router 1.37
Linksys EtherFast BEFSR41 Router 1.36
Linksys EtherFast BEFSR41 Router 1.35
Linksys EtherFast BEFSR41 Router 1.0 5.00
Linksys EtherFast BEFSR11 Router 1.44
Linksys EtherFast BEFSR11 Router 1.43.3
Linksys EtherFast BEFSR11 Router 1.43
Linksys EtherFast BEFSR11 Router 1.42.7
Linksys EtherFast BEFSR11 Router 1.42.3
Linksys EtherFast BEFSR11 Router 1.41
Linksys EtherFast BEFSR11 Router 1.40.2
Linksys EtherFast BEFN2PS4 Router
Linksys BEFW11S4 v4
Linksys BEFW11S4 v3
Linksys BEFW11S4 1.44
Linksys BEFW11S4 1.43.3
Linksys BEFW11S4 1.4.3
Linksys BEFW11S4 1.4.2 .7
Linksys BEFVP41 1.42.7
Linksys BEFVP41 1.40 .4
Linksys BEFVP41 1.40 .3f
Linksys BEFSX41 1.45.3
Linksys BEFSX41 1.44.3
Linksys BEFSX41 1.44
Linksys BEFSX41 1.43.4
Linksys BEFSX41 1.43.3
Linksys BEFSX41 1.43
Linksys BEFSX41 1.42.7
Linksys BEFSR81 v3
Linksys BEFSR81 v2
Linksys BEFSR81
Linksys BEFSR41W
Linksys BEFSR41 v3
Linksys BEFSR41 v2
Linksys BEFSR41 v1
Linksys BEFN2PS4 1.42.7
Linksys BEFCMU10
NOT VULNERABLE:

Vai alla pagina originale su Security Focus

Discussion

Linksys and Netgear routers are susceptible to a remote IRC denial-of-service vulnerability. This issue is due to a failure of the devices to properly handle unexpected network traffic.

This issue allows remote attackers to disconnect IRC sessions, denying service to legitimate users.

Linksys WRT54G routers are vulnerable to this issue. Routers running with the VxWorks operating system, but not Linux-based operating systems, are reportedly affected. Specific device and firmware version information is not currently available. This BID will be updated as further information is disclosed.

Exploit

An attacker likely utilizes a standard IRC client to exploit this issue.

Solution

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.commailto:vuldb@securityfocus.com

References

References:

PhpLog

BNLug Benevento Linux Users Group