D-Link DWL-G700AP HTTPD Denial Of Service Vulnerability

Bugtraq ID:	16690
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 16 2006 12:00AM
Updated:	Feb 17 2006 02:42AM
Credit:	l0om is credited with the discovery of this vulnerability.
Vulnerable:	D-Link DWL-G700AP 2.01 D-Link DWL-G700AP 2.00
Not Vulnerable:

D-Link DWL-G700AP HTTPD Denial Of Service Vulnerability

D-Link DWL-G700AP HTTPD is prone to a remote denial-of-service vulnerability. This issue is due to a failure in the 'httpd' service to properly handle malformed data.

An attacker can exploit this issue to crash the affected webserver, effectively denying service to legitimate users. The affected device must be manually reset to restart the affected service.

This issue is reported to affect firmware versions 2.00 and 2.01; other firmware versions may also be vulnerable.

D-Link DWL-G700AP HTTPD Denial Of Service Vulnerability

An exploit is not required.

The following GET request is sufficient to trigger this issue:
'GET \n\n'


The following proof of concept exploit is available:

• http://www.securityfocus.com/data/vulnerabilities/exploits/death_link.c

D-Link DWL-G700AP HTTPD Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

D-Link DWL-G700AP HTTPD Denial Of Service Vulnerability

References:

• DWL-G700AP Homepage (D-Link)
  
• Vendor Homepage (D-Link)
  
• D-Link DWL-G700AP httpd DoS (l0om)