CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2004-08-06
- Last modified
- 2024-08-08
Affected products
- Befcmu10 (Linksys)
- Befn2ps4 (Linksys)
- Befsr11 (Linksys)
- Befsr41 (Linksys)
- Befsr41w (Linksys)
- Befsr81 (Linksys)
- Befsru31 (Linksys)
- Befsx41 (Linksys)
- Befvp41 (Linksys)
- Rv082 (Linksys)
- Wap55ag (Linksys)
- Wrt54g (Linksys)
References
- http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU…
- http://marc.info/?l=bugtraq&m=108662876129301&w=2
- http://secunia.com/advisories/11606
- http://securitytracker.com/alerts/2004/May/1010288.html
- http://www.osvdb.org/6325
- http://www.securityfocus.com/bid/10329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16142
