ZyXEL Prestige Router Authentication Password Field Remote Denial Of Service Vulnerability

Bugtraq ID:	10638
Class:	Boundary Condition Error
CVE:	CVE-2004-0670
Remote:	Yes
Local:	No
Published:	Jun 30 2004 12:00AM
Updated:	Jul 12 2009 05:16AM
Credit:	Discovery of this vulnerability is credited to Sami_Gascon <[email protected]>.
Vulnerable:	ZyXEL Prestige 650R-11 ZyXEL Prestige 650HW-31
Not Vulnerable:

ZyXEL Prestige Router Authentication Password Field Remote Denial Of Service Vulnerability

ZyXEL Prestige routers are reported prone to a remote denial of service vulnerability. The issue is reported to exist due to a lack of boundary checks performed on password string data handled by the device authentication interface.

A remote attacker who has access to the authentication interface of the affected appliance may trigger a device reset at will, effectively denying service to legitimate users.

ZyXEL Prestige Router Authentication Password Field Remote Denial Of Service Vulnerability

There is no exploit required.

ZyXEL Prestige Router Authentication Password Field Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ZyXEL Prestige Router Authentication Password Field Remote Denial Of Service Vulnerability

References:

• ZyXEL Total Internet Access Solution (ZyXEL)
  
• DSL router Prestige 650HW-31 (Sami_Gascon )