Zyxel Prestige 642R Router Malformed IP Packet Denial Of Service Vulnerability

Bugtraq ID:	5292
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-1072
Remote:	Yes
Local:	No
Published:	Jul 24 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovery credited to [email protected].
Vulnerable:	ZyXEL Prestige 642R ZyXEL Prestige 310
Not Vulnerable:

Zyxel Prestige 642R Router Malformed IP Packet Denial Of Service Vulnerability

ZyXEL 642R and Prestige 310 routers have difficulties handling IP packets that are malformed. Reportedly, when ZyXEL routers receive a single specially malformed packet, they stop responding for exactly 30 seconds.

ZyXEL 642R and Prestige 310 routers are reportedly affected by this vulnerability. It is possible that other ZyNOS-based routers are also affected by this vulnerability

Zyxel Prestige 642R Router Malformed IP Packet Denial Of Service Vulnerability

The following exploit has been provided by Jeff w. Roberson:

• /data/vulnerabilities/exploits/jolt.c

Zyxel Prestige 642R Router Malformed IP Packet Denial Of Service Vulnerability

Solution:
The vendor has reported that new firmware versions are available which resolve this issue. Customers are advised to contact their local ZyXEL distributor in order to obtain updates.

This issue is resolved in firmware versions P642R-11 v2.50(AJ.9)C0 and P310 v3.50(M.01).

Zyxel Prestige 642R Router Malformed IP Packet Denial Of Service Vulnerability

References:

• ZyXEL Total Internet Access Solution (ZyXEL)