Network Everywhere NR041 Router DHCP Log HTML Injection Vulnerability

Bugtraq ID:	11046
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2004 12:00AM
Updated:	Aug 25 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Mathieu Lacroix <[email protected]>.
Vulnerable:	Network Everywhere NR041 1.2 Release 03
Not Vulnerable:

Network Everywhere NR041 Router DHCP Log HTML Injection Vulnerability

It is reported that the Network Everywhere NR041 Router is susceptible to an HTML injection vulnerability in its DHCP log.

An attacker can craft successive DHCP requests, which when viewed by the administrator, will be combined to create longer strings of HTML that are interpreted by the administrator's web browser.

The injected HTML can be used to cause the administrator to make unintended changes to the configuration of the router. Other attacks may be possible.

Network Everywhere NR041 Router DHCP Log HTML Injection Vulnerability

There is no exploit required.

Network Everywhere NR041 Router DHCP Log HTML Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Network Everywhere NR041 Router DHCP Log HTML Injection Vulnerability

References:

• NR041 Homepage (Network Everywhere)
  
• bug found (Mathieu Lacroix )