CVE-2004-0580

Public PoC / Exploit (1)

Exploit-DBLinksys - DHCP Information Disclosure

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

Affected Products (50)

linksys · befcmu10vulnerable

linksys · befn2ps4vulnerable

linksys · befsr11vulnerable

linksys · befsr41vulnerable

linksys · befsr41wvulnerable

linksys · befsr81vulnerable

linksys · befsru31vulnerable

linksys · befsx41vulnerable

linksys · befvp41vulnerable

linksys · rv082vulnerable

linksys · wap55agvulnerable

linksys · wrt54gvulnerable

References (14)

http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=

http://marc.info/?l=bugtraq&m=108662876129301&w=2

http://secunia.com/advisories/11606

http://securitytracker.com/alerts/2004/May/1010288.html

http://www.osvdb.org/6325

http://www.securityfocus.com/bid/10329

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16142