Linksys WRT54G Router Blank HTTP GET Request Denial Of Service Vulnerability

Bugtraq ID:	9152
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 03 2003 12:00AM
Updated:	Dec 03 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to [email protected].
Vulnerable:	Linksys WRT54G v2.0 2.0 0.8 (Firmware) Linksys WPC300N - Wireless-N Notebook Adapter 4.100.15.5
Not Vulnerable:

Linksys WRT54G Router Blank HTTP GET Request Denial Of Service Vulnerability

The Linksys WRT54G router has been reported prone to a denial of service vulnerability while handling blank HTTP GET requests. It has been reported that when the affected appliance handles a request of this type the embedded web server will halt, requiring the appliance to be power cycled in order to regain normal functionality.

Linksys WRT54G Router Blank HTTP GET Request Denial Of Service Vulnerability

There is no exploit required.

Linksys WRT54G Router Blank HTTP GET Request Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Linksys WRT54G Router Blank HTTP GET Request Denial Of Service Vulnerability

References:

• WRT54G Product Page (Linksys)
  
• Linksys WRT54G Denial of Service Vulnerability ()