Zonet Wireless Router NAT Implementation Design Flaw Vulnerability

Bugtraq ID:	10225
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 23 2004 12:00AM
Updated:	Apr 23 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Jason Wachtel <[email protected]>.
Vulnerable:	Zonet ZSR1104WE 2.41
Not Vulnerable:

Zonet Wireless Router NAT Implementation Design Flaw Vulnerability

A vulnerability has been reported to affect the implementation of NAT for the ZSR1104WE model Zonet Wireless Router. NAT for the wireless interface on the ZSR1104WE appliance is reported to modify IP data so that on the internal network, the origin address of forwarded traffic is that of the affected appliance. This issue may render the implementation of access controls on an internal host impossible.

Zonet Wireless Router NAT Implementation Design Flaw Vulnerability

There is no exploit required.

Zonet Wireless Router NAT Implementation Design Flaw Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Zonet Wireless Router NAT Implementation Design Flaw Vulnerability

References:

• Zonet USA (Zonet)
  
• ZSR1104WE Wireless Router w/Access Point Homepage (Zonet)