Zyxel Prestige SDSL Router IP Packet Length Remote Denial Of Service Vulnerability
BID:3695
Info
Zyxel Prestige SDSL Router IP Packet Length Remote Denial Of Service Vulnerability
| Bugtraq ID: | 3695 |
| Class: | Design Error |
| CVE: |
CVE-2001-1194 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | This vulnerability was discovered by Przemyslaw Frasunek <[email protected]>, and announced via Bugtraq on December 14, 2001. |
| Vulnerable: |
ZyXEL Prestige 681 ZyXEL Prestige 1600 |
| Not Vulnerable: | |
Discussion
Zyxel Prestige SDSL Router IP Packet Length Remote Denial Of Service Vulnerability
A problem with Zyxel routers has been discovered that could lead to a remote denial of service attack. The problem is in the receipt of malformed packets.
When a Zyxel router receives malformed packets crafted with an IP length shorter than the actual size of the packet, the router becomes unstable and drops connectivity. This loss of connectivity can last up to three minutes. This could lead to a remote user denying service to a legitimate user of the router. The router is affected only by malformed packets received through the DSL interface. Malformed packets sent through the LAN interface have no affect on the system.
A problem with Zyxel routers has been discovered that could lead to a remote denial of service attack. The problem is in the receipt of malformed packets.
When a Zyxel router receives malformed packets crafted with an IP length shorter than the actual size of the packet, the router becomes unstable and drops connectivity. This loss of connectivity can last up to three minutes. This could lead to a remote user denying service to a legitimate user of the router. The router is affected only by malformed packets received through the DSL interface. Malformed packets sent through the LAN interface have no affect on the system.
Exploit / POC
Zyxel Prestige SDSL Router IP Packet Length Remote Denial Of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Zyxel Prestige SDSL Router IP Packet Length Remote Denial Of Service Vulnerability
Solution:
Vendor fixes available:
ZyXEL Prestige 681
Solution:
Vendor fixes available:
ZyXEL Prestige 681
-
ZyXel p681_V2.50(T.06)C0_firmware_Standard_3.zip
ftp://ftp.xyzel.com/download/public/firmware/p681_V2.50(T.06)C0_firmwa re_Standard_3.zip
References
Zyxel Prestige SDSL Router IP Packet Length Remote Denial Of Service Vulnerability
References:
References: