Multiple Vendor Broadband Router Web-Based Administration Denial Of Service Vulnerability

Bugtraq ID:	10585
Class:	Design Error
CVE:	CVE-2004-0610 CVE-2004-0611
Remote:	Yes
Local:	No
Published:	Jun 21 2004 12:00AM
Updated:	Jul 12 2009 05:16AM
Credit:	Paul Kurczaba disclosed this vulnerability.
Vulnerable:	NetGear FVS318 1.3 NetGear FVS318 1.2 NetGear FVS318 1.1 NetGear FVS318 1.0 Microsoft MN-500 Linksys EtherFast BEFSR41 Router 1.45.7 Linksys EtherFast BEFSR41 Router 1.44 Linksys EtherFast BEFSR41 Router 1.43.3 Linksys EtherFast BEFSR41 Router 1.43 Linksys EtherFast BEFSR41 Router 1.42.7 Linksys EtherFast BEFSR41 Router 1.42.3 Linksys EtherFast BEFSR41 Router 1.41 Linksys EtherFast BEFSR41 Router 1.40.2 Linksys EtherFast BEFSR41 Router 1.39 Linksys EtherFast BEFSR41 Router 1.38 Linksys EtherFast BEFSR41 Router 1.37 Linksys EtherFast BEFSR41 Router 1.36 Linksys EtherFast BEFSR41 Router 1.35 Linksys EtherFast BEFSR41 Router 1.0 5.00 Linksys BEFSR41 v3 Linksys BEFSR41 v2 Linksys BEFSR41 v1
Not Vulnerable:

Multiple Vendor Broadband Router Web-Based Administration Denial Of Service Vulnerability

Multiple broadband routers from several different vendors, used for home and small office Internet sharing and routing are reported affected by a denial of service vulnerability in their web-based administration interfaces.

The embedded web server is reportedly unable to maintain more than a small number of simultaneous TCP connections. An attacker who maintains a number of connections to port 80 of an affected device will block access to the web administration application for legitimate users.

An attacker could block access to the administration interface as long as they can maintain the TCP connections.

Netgear FVS318, Linksys BEFSR41, and Microsoft MN-500 devices are reported to be susceptible.

Multiple Vendor Broadband Router Web-Based Administration Denial Of Service Vulnerability

No exploit is required.

Multiple Vendor Broadband Router Web-Based Administration Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Vendor Broadband Router Web-Based Administration Denial Of Service Vulnerability

References:

• Homepage (Netgear)
  
• Model FVS318 Product Page (Netgear)
  
• Netgear Support Page (Netgear)
  
• Microsoft MN-500 Wireless Router Web-Based Administration DoS (Kurczaba Associates advisories )
  
• NETGEAR FVS318 Web-Based Administration DoS (Kurczaba Associates advisories )