D-Link AirPlus DI-614+, DI-624, and DI-604 DHCP Server Flooding Denial Of Service Vulnerability
BID:10621
Info
D-Link AirPlus DI-614+, DI-624, and DI-604 DHCP Server Flooding Denial Of Service Vulnerability
| Bugtraq ID: | 10621 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2004-0661 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | Gregory Duchemin <[email protected]> reported this vulnerability. |
| Vulnerable: |
D-Link DI-624 SOHO Router 1.28 D-Link DI-614+ 2.30 D-Link DI-604 |
| Not Vulnerable: | |
Discussion
D-Link AirPlus DI-614+, DI-624, and DI-604 DHCP Server Flooding Denial Of Service Vulnerability
The D-Link DI-614+, DI-624, and DI-604 are reported susceptible to a denial of service vulnerability in their DHCP service.
By flooding the DHCP service with valid DHCP requests, the device will reportedly consume all available memory and eventually reboot.
An attacker may be able to deny service to legitimate users of an affected device by repeatedly causing the device to reboot.
The DI-614+ with firmware revision 2.30, and the DI-604 with unknown firmware were reported vulnerable. The DI-624 Revision B was also confirmed susceptible.
The D-Link DI-614+, DI-624, and DI-604 are reported susceptible to a denial of service vulnerability in their DHCP service.
By flooding the DHCP service with valid DHCP requests, the device will reportedly consume all available memory and eventually reboot.
An attacker may be able to deny service to legitimate users of an affected device by repeatedly causing the device to reboot.
The DI-614+ with firmware revision 2.30, and the DI-604 with unknown firmware were reported vulnerable. The DI-624 Revision B was also confirmed susceptible.
Exploit / POC
D-Link AirPlus DI-614+, DI-624, and DI-604 DHCP Server Flooding Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
D-Link AirPlus DI-614+, DI-624, and DI-604 DHCP Server Flooding Denial Of Service Vulnerability
Solution:
Reportedly, firmware revision 3.41 has been released for the DI-614+ Revision B device. Neither the Revision A device (with two antennas), nor the DI-604 device, have new firmware versions to resolve this issue.
Please contact D-Link for further information.
Solution:
Reportedly, firmware revision 3.41 has been released for the DI-614+ Revision B device. Neither the Revision A device (with two antennas), nor the DI-604 device, have new firmware versions to resolve this issue.
Please contact D-Link for further information.
References
D-Link AirPlus DI-614+, DI-624, and DI-604 DHCP Server Flooding Denial Of Service Vulnerability
References:
References:
- Vendor Homepage (D-Link)
- DLINK 614+ - SOHO routers, system DOS (Gregory Duchemin
- Re: DLINK 614+ - SOHO routers, system DOS (Gregory Duchemin
- Re: DLINK 614+ - SOHO routers, system DOS (Gregory Duchemin