The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request.
Weakness
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireless_8760_dual-radio | 3com | * | * |
Potential Mitigations
Related Attack Patterns
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html
- http://secunia.com/advisories/31714
- http://www.securityfocus.com/bid/30988
- http://www.securitytracker.com/id?1020807
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44890
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html
- http://secunia.com/advisories/31714
- http://www.securityfocus.com/bid/30988
- http://www.securitytracker.com/id?1020807
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44890