Belkin Wireless G Router Remote Syn Flood Denial of Service Vulnerability

Bugtraq ID:	26498
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6040
Remote:	Yes
Local:	No
Published:	Nov 19 2007 12:00AM
Updated:	Dec 18 2007 08:06PM
Credit:	[email protected] is credited with the discovery of this issue.
Vulnerable:	Belkin F5D7230-4
Not Vulnerable:

Belkin Wireless G Router Remote Syn Flood Denial of Service Vulnerability

Belkin Wireless G routers are prone to a remote denial-of-service vulnerability because the devices fail to properly handle certain network traffic.

Successfully exploiting this issue allows remote attackers to crash the logging system of affected devices. This may aid in obfuscating further attacks.

Belkin Wireless G routers with model number F5D7230-4 are vulnerable to this issue; other versions may also be affected.

Belkin Wireless G Router Remote Syn Flood Denial of Service Vulnerability

Attackers use readily available network utilities to exploit this issue.

Belkin Wireless G Router Remote Syn Flood Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Belkin Wireless G Router Remote Syn Flood Denial of Service Vulnerability

References:

• F5D7230-4 Wireless G Router Product Page (Belkin)
  
• Belkin Wireless G Router DoS ([email protected])