Linksys BEFVP41 IP Options Remote Denial Of Service Vulnerability

Bugtraq ID:	16307
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 18 2006 12:00AM
Updated:	Feb 07 2006 08:55PM
Credit:	[email protected] discovered this issue.
Vulnerable:	Linksys BEFVP41 1.42.7 Linksys BEFVP41 1.40 .4 Linksys BEFVP41 1.40 .3f
Not Vulnerable:

Linksys BEFVP41 IP Options Remote Denial Of Service Vulnerability

Linksys BEFVP41 routers are susceptible to a remote denial of service vulnerability. This issue is due to a failure of the devices to properly handle unexpected network traffic.

This issue allows remote attackers to crash affected devices, denying service to legitimate users.

Reportedly, attackers must be located on the internal network, and be able to pass traffic through the router to exploit this issue. It may also be possible from the external side of the network, but this has not been confirmed.

Linksys BEFVP41 IP Options Remote Denial Of Service Vulnerability

An exploit is not required.

Linksys BEFVP41 IP Options Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Linksys BEFVP41 IP Options Remote Denial Of Service Vulnerability

References:

• BEFVP41 Product Page (Linksys)
  
• Re: Linksys VPN Router (BEFVP41) DoS Vulnerability ([email protected])