Linksys DomainName buffer overflow
| linksys-domainname-bo (16305) |  Medium Risk |
Description:
Linksys EtherFast is vulnerable to a denial of service attack, caused by a buffer overflow. A remote attacker could create a specially-crafted HTTP request containing a long string in the DomainName parameter in the Gozila.cgi script, which could cause the router to stop responding, once the administrator clicks the link. An attacker could exploit this vulnerability by creating a malicious Web page and hosting it on a Web site or by sending it to a victim as an HTML email.
Platforms Affected:
- Linksys, BEFSR11
- Linksys, BEFSR41
- Linksys, BEFSR81 1
- Linksys, BEFSR81 3
- Linksys, BEFSRU31
- Linksys, BEFSX41
- Linksys, BEFW11S4 3
- Linksys, BEFW11S4 4
Remedy:
For Linksys EtherFast BEFSR41 router:
No remedy available as of June 2004.
For Linksys EtherFast BEFSR81 v2/v3 router:
No remedy available as of June 2004.
For Linksys EtherFast BEFW11S4 v3/v4 router:
No remedy available as of June 2004.
For Linksys EtherFast BEFSRU31 router:
No remedy available as of June 2004.
For Linksys EtherFast BEFSR11 router:
No remedy available as of June 2004.
For Linksys EtherFast BEFSX41 router:
Upgrade to the latest firmware version (1.42.7 or later), available from the Linksys Support Web page. See References.
Consequences:
Denial of Service
References:
- Full-Disclosure Mailing List, Thu Jun 03 2004 - 03:31:06 CDT, DoS vuln in various versions of Linksys routers. at http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0029.html.
- Linksys Support Web site, Linksys: Firmware Upgrades at 0 Linksys Support Web site Linksys: Firmware Upgrades http://www.linksys.com/download/firmware.asp?fwid=172 0.
- BID-10453: Multiple Linksys Routers Gozila.CGI Denial Of Service Vulnerabilities
Reported:
Jun 03, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net