Red-M 1050AP Lan Access Point Web Administration Interface Denial of Service Vulnerability

Bugtraq ID:	4942
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0393
Remote:	Yes
Local:	No
Published:	Jun 05 2002 12:00AM
Updated:	Jul 11 2009 01:56PM
Credit:	Discovered by Ollie Whitehouse <[email protected]>.
Vulnerable:	Red-M 1050AP LAN access point
Not Vulnerable:

Red-M 1050AP Lan Access Point Web Administration Interface Denial of Service Vulnerability

The Red-M 1050AP Lan Access Point is a hardware device which provides a LAN access point to Bluetooth devices. The device supports a web based administration interface.

A denial of service issue has been discovered in Red-M Access Point. Reportedly, this issue is exploitable when supplying an unusually long string of data for the web based administration interface password.

A manual restart of the device is required in order to regain functionality.

Red-M 1050AP Lan Access Point Web Administration Interface Denial of Service Vulnerability

No exploit code required.

Red-M 1050AP Lan Access Point Web Administration Interface Denial of Service Vulnerability

Solution:
Red-M has addressed this issue in firmware v2.02.10:


Red-M 1050AP LAN access point

• Red-M 1050AP_2_02_10
  Firmware Upgrade
  http://www.red-m.com/Products/Downloads/freefiles/1050AP_2_02_10.zip

Red-M 1050AP Lan Access Point Web Administration Interface Denial of Service Vulnerability

References:

• Red-M 1050AP access point (Red-M)