ZyXEL P681 ARP Request Information Disclosure Vulnerability

Bugtraq ID:	11167
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 13 2004 12:00AM
Updated:	Sep 13 2004 12:00AM
Credit:	Przemyslaw Frasunek <[email protected]> disclosed this vulnerability.
Vulnerable:	ZyXEL Prestige 681
Not Vulnerable:

ZyXEL P681 ARP Request Information Disclosure Vulnerability

It is reported that ZyXEL Prestige 681 SDSL routers are susceptible to an information disclosure vulnerability.

An attacker sniffing network traffic on an attached network would be able to retrieve partial contents of network packets that have traversed the affected device.

This information may assist malicious users in attacks on systems and services that utilize the affected device.

ZyNOS version Vt020225a is reported vulnerable to this issue. Due to code reuse among products, it is likely that other devices and versions are also affected by this issue.

ZyXEL P681 ARP Request Information Disclosure Vulnerability

An exploit is not required.

ZyXEL P681 ARP Request Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ZyXEL P681 ARP Request Information Disclosure Vulnerability

References:

• Prestige 681 Product Page (ZyXEL)
  
• Zyxel Prestige 681 SDSL router information leak (Przemyslaw Frasunek )