Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Di-804 | D-link | 4.68 (including) | 4.68 (including) |
| Dl-704 | D-link | 2.56_b5 (including) | 2.56_b5 (including) |
| Dl-704 | D-link | 2.56_b6 (including) | 2.56_b6 (including) |
| Befw11s4 | Linksys | 1.4.2.7 (including) | 1.4.2.7 (including) |
| Befw11s4 | Linksys | 1.37.2 (including) | 1.37.2 (including) |
| Befw11s4 | Linksys | 1.37.2b (including) | 1.37.2b (including) |
| Befw11s4 | Linksys | 1.37.9b (including) | 1.37.9b (including) |
| Befw11s4 | Linksys | 1.40.3 (including) | 1.40.3 (including) |
| Befw11s4 | Linksys | 1.42.7 (including) | 1.42.7 (including) |
| Wap11 | Linksys | 1.3 (including) | 1.3 (including) |
| Wap11 | Linksys | 1.4 (including) | 1.4 (including) |
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html
- http://www.iss.net/security_center/static/10537.php
- http://www.securityfocus.com/bid/6090
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html
- http://www.iss.net/security_center/static/10537.php
- http://www.securityfocus.com/bid/6090