|
D-Link Wireless Access Point Denial of Service Vulnerability
|
|
Secunia Advisory:
|
SA18833
|
|
|
Release Date:
|
2006-02-14
|
|
Last Update:
|
2006-02-17
|
|
Popularity:
|
10,117 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | D-Link DI-524
D-Link DI-624
D-Link DI-784
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-4723
|
|
Description:
Aaron Portnoy and Keefe Johnson has reported a vulnerability in D-Link Wireless Access Point, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an error in the handling of fragmented UDP packets. This may be exploited to cause the device to terminate connections or reboot via certain specially crafted UDP packets.
The vulnerability has been reported in the following products:
* D-Link DI-524 Wireless Router (firmware version 3.20 August 18, 2005).
* D-Link DI-624 Wireless Router.
* D-Link DI-784.
Solution:
The vulnerability has reportedly been fixed in the latest firmware.
Provided and/or discovered by:
Aaron Portnoy and Keefe Johnson
Changelog:
2006-02-17: Added CVE reference.
Original Advisory:
http://www.thunkers.net/~deft/advisories/dlink_udp_dos.txt
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
