3Com OfficeConnect ADSL Wireless 11g Firewall Router Denial of Service Vulnerability

Bugtraq ID:	37421
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 19 2009 12:00AM
Updated:	Dec 28 2009 09:02PM
Credit:	Alberto Ortega Llamas
Vulnerable:	3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100Y-72 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72
Not Vulnerable:

3Com OfficeConnect ADSL Wireless 11g Firewall Router Denial of Service Vulnerability

3Com OfficeConnect ADSL Wireless 11g Firewall Router is prone to a denial-of-service vulnerability when handling specially crafted HTTP requests.

Successful exploits will cause the device to crash, denying service to legitimate users.

This issue affects 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72 with firmware 2.06T13; other versions may be affected as well.

3Com OfficeConnect ADSL Wireless 11g Firewall Router Denial of Service Vulnerability

An exploit is available:

• /data/vulnerabilities/exploits/37421.rb

3Com OfficeConnect ADSL Wireless 11g Firewall Router Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

3Com OfficeConnect ADSL Wireless 11g Firewall Router Denial of Service Vulnerability

References:

• 3Com OfficeConnect ADSL Wireless 11g Firewall Router (3Com)