Contact | Site en Français               

 


 

Vulnerabilities & Threats

 
  VUPEN Security Advisories
  Linux Security Advisories

  Malware Advisories

  Zero-Day Monitor
  Search Engine
 
   

>> Linksys WAP4400N Denial of Service and SNMPv3 Issues

Title : Linksys WAP4400N Denial of Service and SNMPv3 Issues
Advisory ID : VUPEN/ADV-2008-2805
CVE ID : CVE-2008-4441 - CVE-2008-4594
CWE ID : CWE-399
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-10-14

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive VUPEN Security alerts in a Text format  Receive VUPEN Security alerts in a PDF format  Receive VUPEN Security alerts in an XML format  Receive VUPEN Security notifications by SMS 

Two vulnerabilities have been identified in Linksys WAP4400N, which could be exploited by attackers to cause a denial of service or bypass security restrictions.

The first issue is caused by an error when processing malformed association requests while the access point is in WEP mode, which could be exploited to crash an affected device, creating a denial of service condition.

The second vulnerability is caused by an unspecified issue related to SNMPv3.

Credits

Vulnerabilities reported by Laurent Butti and Julien Tinnes (France Telecom / Orange), and the vendor.

ChangeLog

2008-10-14 : Initial release

Vulnerability Management

Subscribe to VUPEN Security VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@vupen.com.

 


Copyright 2003-2008 © VUPEN.COM - Privacy Policy