PT-2006-2095 · Linksys · Linksys Wrt54G

Hm2K · Publicado 2006-03-07 · Atualizado 2018-10-18 · CVE-2006-1067

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linksys WRT54G routers version 5

Description The issue allows remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel. This results in an IRC connection reset and may be related to the masquerading code for NAT environments. The denial of service can be triggered by sending a DCC SEND with a single long argument or a DCC SEND with IP, port, and filesize arguments with a 0 value.

Recommendations For Linksys WRT54G routers version 5, consider restricting access to IRC channels to minimize the risk of exploitation until a fix is available. As a temporary workaround, avoid using the DCC SEND feature in IRC connections.

Correção

Identificadores relacionados

CVE-2006-1067

Produtos afetados

Linksys Wrt54G

Referências · 8

• http://securityfocus.com/archive/1/426863/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1067 · Nota de Segurança
• http://securityfocus.com/archive/1/426756/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 · Nota
• http://hm2k.org/news/1141413208.html · Nota
• http://securityfocus.com/bid/16954 · Nota
• http://securityfocus.com/archive/1/426934/100/0/threaded · Nota
• http://securityfocus.com/archive/1/426761/100/0/threaded · Nota