Netgear DG834 ADSL Firewall Router Insecure Configuration Vulnerability

Bugtraq ID:	12447
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 04 2005 12:00AM
Updated:	Feb 04 2005 12:00AM
Credit:	This vulnerability was reported by Peter Collinson <[email protected]>.
Vulnerable:	NetGear DG834 ADSL Firewall Router
Not Vulnerable:

Netgear DG834 ADSL Firewall Router Insecure Configuration Vulnerability

The Netgear DG834 ADSL Firewall Router is reported prone to a firewall insecure configuration vulnerability. It is reported that when the affected appliance is configured so that NAT (Network Address Translation) is disabled the firewall becomes ineffective.

This vulnerability will result in a false sense of security where a user may believe that their network and appliance is protected when it is not.

Netgear DG834 ADSL Firewall Router Insecure Configuration Vulnerability

No exploit is required.

Netgear DG834 ADSL Firewall Router Insecure Configuration Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Netgear DG834 ADSL Firewall Router Insecure Configuration Vulnerability

References:

• ADSL Firewall Router Model DG834 (NetGear)