|
ZyXEL ZyNOS Frame Padding Information Disclosure Vulnerability
|
|
Secunia Advisory:
|
SA10817
|
|
|
Release Date:
|
2004-02-09
|
|
Popularity:
|
7,388 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
Exposure of system information
Exposure of sensitive information
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | ZyXEL ZyNOS 3.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
DiSToAGe has reported that ZyXEL ZyNOS is affected by a known information disclosure vulnerability, which can be exploited by malicious people to obtain potentially sensitive information.
The vulnerability is caused due to frames being padded with content from previous packets or memory instead of using NULL-bytes. This can be exploited by sending specially crafted packets to a vulnerable device.
The vulnerability has been reported in a Zyxel Prestige 650R-11 ADSL router running ZyNOS V3.40(ES.5). Other Prestige routers and versions of ZyNOS may also be affected. However, the vendor originally reported to CERT that the vulnerability didn't affect ZyXEL devices running ZyNOS 2.50 through 3.60.
NOTE: According to the original advisory, the vulnerability was only tested on the local interface. It is therefore not currently known whether the external interface also is affected.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
