2wire Modems and Routers CRLF Denial of Service Vulnerability

Bugtraq ID:	19634
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2006 12:00AM
Updated:	Aug 30 2006 05:08PM
Credit:	preth00nker is credited with discovering this vulnerability.
Vulnerable:	2Wire OfficePortal 0 2Wire HomePortal 1500W 2Wire HomePortal 100W 2Wire HomePortal 100S 2Wire HomePortal 1000W 2Wire HomePortal 1000SW 2Wire HomePortal 1000S 2Wire HomePortal 1000 2Wire HomePortal 0
Not Vulnerable:

2wire Modems and Routers CRLF Denial of Service Vulnerability

2wire Modems and Routers are prone to a remote denial-of-service vulnerability.

This may permit an attacker to crash affected devices, denying further network services to legitimate users.

2wire Modems and Routers CRLF Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/2wire-aug21-2006.cpp

2wire Modems and Routers CRLF Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please email us at: [email protected]:[email protected].

2wire Modems and Routers CRLF Denial of Service Vulnerability

References:

• 2wire Homepage (2wire)
  
• DoS 2wire Gateway (preth00nker)