PT-2006-2095 · Linksys · Linksys Wrt54G

Hm2K · Published 2006-03-07 · Updated 2018-10-18 · CVE-2006-1067

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linksys WRT54G routers version 5

Description The issue allows remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel. This results in an IRC connection reset and may be related to the masquerading code for NAT environments. The denial of service can be triggered by sending a DCC SEND with a single long argument or a DCC SEND with IP, port, and filesize arguments with a 0 value.

Recommendations For Linksys WRT54G routers version 5, consider restricting access to IRC channels to minimize the risk of exploitation until a fix is available. As a temporary workaround, avoid using the DCC SEND feature in IRC connections.

Fix

Related Identifiers

CVE-2006-1067

Affected Products

Linksys Wrt54G

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-1067 · Security Note
• http://securityfocus.com/archive/1/426863/100/0/threaded · Note
• http://securityfocus.com/archive/1/426756/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 · Note
• http://hm2k.org/news/1141413208.html · Note
• http://securityfocus.com/bid/16954 · Note
• http://securityfocus.com/archive/1/426934/100/0/threaded · Note
• http://securityfocus.com/archive/1/426761/100/0/threaded · Note