Secunia

A security issue and a vulnerability have been reported in Linksys WVC54GC, which can be exploited by malicious people to disclose system and sensitive information and to compromise a user's system.

1) The device sends certain information (e.g. login credentials and wireless network connection information, including WEP and WPA keys) in plain text after receiving a certain packet on port 916/UDP. This can be exploited to gain access to sensitive information by sending a specially crafted packet to a vulnerable device.

2) A boundary error in the "SetSource()" method of the NetCamPlayerWeb11gv2 ActiveX control (NetCamPlayerWeb11gv2.ocx) can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into visiting a malicious website.

The security issue and the vulnerability are reported in versions prior to 1.25.

Solution
Update to firmware version 1.25.
Further details available in Customer Area

Provided and/or discovered by
US-CERT credits Greg Linares, eEye.

Changelog
Further details available in Customer Area

Original Advisory
US-CERT VU#528993:
http://www.kb.cert.org/vuls/id/528993

US-CERT VU#639345:
http://www.kb.cert.org/vuls/id/639345

Deep Links
Links available in Customer Area