Secunia

Mathieu Lacroix has reported a vulnerability in Network Everywhere Cable/DSL 4-Port Router NR041, allowing malicious people to conduct script insertion attacks.

The DHCP daemon does not sanitise input passed with the "DHCP HOSTNAME" option in DHCP packets. This can be exploited to execute arbitrary HTML and script code in an administrative user's browser session when a malicious entry is viewed via the web-based administrative interface.

The vulnerability has been reported in version 1.2 Release 03. Other versions may also be affected.

Solution
Disable the DHCP service or don't view DHCP logs in the administrative interface.

Provided and/or discovered by
Mathieu Lacroix

Deep Links
Links available in Customer Area