NetGear DG834GT Long Username Denial Of Service Vulnerability

Bugtraq ID:	19973
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 12 2006 12:00AM
Updated:	Sep 13 2006 04:32PM
Credit:	NullFlag is credited with the discovery of this vulnerability.
Vulnerable:	NetGear DG834GT Wireless ADSL Router Firmware V1.01.28
Not Vulnerable:

NetGear DG834GT Long Username Denial Of Service Vulnerability

The NetGear DG834GT device is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

This issue allows attackers to cause the device to stop responding to network requests, effectively denying service to legitimate users.

NetGear DG834GT Long Username Denial Of Service Vulnerability

Attackers can exploit this vulnerability with a standard web browser.

NetGear DG834GT Long Username Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

NetGear DG834GT Long Username Denial Of Service Vulnerability

References:

• Homepage (Netgear)
  
• NetGear DG834GT Web Site (Netgear)