Atmel SNMP public Community or Unknown OID Denial of Service Vulnerability

Bugtraq ID:	3734
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 21 2001 12:00AM
Updated:	Dec 21 2001 12:00AM
Credit:	Discovered by Frederic Brouille of VIGILANTe, and published in an advisory on December 21, 2001.
Vulnerable:	Atmel Firmware 1.3 + Linksys WAP11 1.3 + NetGear ME102 1.3
Not Vulnerable:

Atmel SNMP public Community or Unknown OID Denial of Service Vulnerability

Atmel is a chip design and manufacturing firm that provides various RF-based products to corporate consumers. Atmel manufactures firmware for various wireless access systems. The firmware supports the SNMP protocol for network management.

If a SNMP read request is sent with a community string other than 'public', or an unknown OID key, a denial of service condition is created. The device will not respond to further communication, and a restart is required to regain normal functionality.

Atmel SNMP public Community or Unknown OID Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Atmel SNMP public Community or Unknown OID Denial of Service Vulnerability

Solution:
Current versions of the firmware may not be vulnerable.

Atmel SNMP public Community or Unknown OID Denial of Service Vulnerability

References:

• Atmel Homepage (Atmel)
  
• Driver Downloads (Linksys)
  
• Netgear Support Page (Netgear)