PT-2003-1178 · Belkin · Belkin F5D5230-4 4-Port Cable/Dsl Gateway Router

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1431

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Belkin F5D5230-4 4-Port Cable/DSL Gateway Router version 1.20.000

Description The issue allows remote attackers to hide the internal host being used to access an internal web server. This is achieved by modifying the source IP address of internal packets to that of the router's external interface when forwarding a request.

Recommendations For Belkin F5D5230-4 4-Port Cable/DSL Gateway Router version 1.20.000, consider restricting access to the internal web server to prevent unauthorized access. As a temporary workaround, restrict the router's ability to modify the source IP address of internal packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1431

Affected Products

Belkin F5D5230-4 4-Port Cable/Dsl Gateway Router

References · 4

• http://securityfocus.com/bid/4982 · Vendor Advisory
• http://online.securityfocus.com/archive/1/276256 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1431 · Security Note
• http://iss.net/security_center/static/9324.php · Vendor Advisory