D-Link Print Server Long Post Request Denial Of Service Vulnerability

Bugtraq ID:	5330
Class:	Boundary Condition Error
CVE:	CVE-2002-1068
Remote:	Yes
Local:	No
Published:	Jul 27 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Vulnerability discovery credited to FX <[email protected]> and FtR <[email protected]>.
Vulnerable:	D-Link DP-303
Not Vulnerable:

D-Link Print Server Long Post Request Denial Of Service Vulnerability

The DP-303 Print Server is a hardware device designed to allow the sharing of printers over an ethernet connection.

It is possible to crash the web server that serves the administrative interface. Upon connecting to the server, and sending an excessively long post request to a known configuration page, the web server becomes unstable and crashes. The web server will not function again until the device is power-cycled.

D-Link Print Server Long Post Request Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

D-Link Print Server Long Post Request Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

D-Link Print Server Long Post Request Denial Of Service Vulnerability

References:

• Phenoelit Advisory (Phenoelit Group)