NETGEAR WG602v4 Administrator Password Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	40458
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 31 2010 12:00AM
Updated:	May 31 2010 12:00AM
Credit:	Cristofaro Mune
Vulnerable:	NetGear WG602v4 0
Not Vulnerable:

NETGEAR WG602v4 Administrator Password Remote Stack Buffer Overflow Vulnerability

The NETGEAR WG602v4 is prone to a remote stack-based buffer-overflow vulnerability because the device fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will result in a denial-of-service condition.

NETGEAR WG602v4 Administrator Password Remote Stack Buffer Overflow Vulnerability

Attackers can exploit this issue to create a denial-of-service condition using readily available tools.

NETGEAR WG602v4 Administrator Password Remote Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NETGEAR WG602v4 Administrator Password Remote Stack Buffer Overflow Vulnerability

References:

• IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow (Icy Silence)
  
• Recovering exploited Netgear WG602v4 (Icy Silence)
  
• WG602v4 Homepage (NETGEAR)
  
• IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow (Cristofaro Mune )