PT-2006-2096 · NetGear · Netgear 614+1

Hm2K · Published 2006-03-07 · Updated 2018-10-18 · CVE-2006-1068

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Netgear 614 and 624 routers (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel. This results in an IRC connection reset and may be related to the masquerading code for NAT environments. The denial of service can be triggered by sending a DCC SEND with a single long argument or a DCC SEND with IP, port, and filesize arguments with a 0 value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1068

Affected Products

Netgear 614

Netgear 624

References · 8

• 🔥 http://hm2k.org/news/1141413208.html · Exploit
• http://securityfocus.com/archive/1/426863/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1068 · Security Note
• http://securityfocus.com/archive/1/426756/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 · Note
• http://securityfocus.com/bid/16954 · Note
• http://securityfocus.com/archive/1/426934/100/0/threaded · Note
• http://securityfocus.com/archive/1/426761/100/0/threaded · Note