Published: 06/08/2004 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote malicious users to obtain sensitive information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linksys befsr11 1.44
linksys befvp41 1.40.4
linksys befcmu10
linksys befsr11 1.40.2
linksys wap55ag 1.0.7
linksys befsr81 2.42.7.1
linksys befsr81 2.44
linksys befsr11 1.42.3
linksys befvp41 1.39.64
linksys befvp41 1.42.7
linksys befsru31 1.42.3
linksys befsr41w
linksys befsr41 1.40.2
linksys befsr41 1.45.7
linksys befsru31 1.41
linksys befsr41 1.42.3
linksys befsx41 1.43.4
linksys befsr11 1.43
linksys befsru31 1.43
linksys befsr41 1.42.7
linksys befsr41 1.44
linksys befsr41 1.36
linksys befsx41 1.44.3
linksys befsx41 1.42.7
linksys befsx41 1.43
linksys befsr11 1.42.7
linksys befsru31 1.44
linksys befvp41
linksys befsr41 1.35
linksys befsr11 1.43.3
linksys befsru31 1.42.7
linksys befsx41 1.43.3
linksys befsr41 1.41
linksys befsx41 1.44
linksys befsx41 1.45.3
linksys befsr41 1.43
linksys befn2ps4
linksys befvp41 1.40.3f
linksys befn2ps4 1.42.7
linksys rv082
linksys wrt54g 1.42.3
linksys wrt54g 2.00.8
linksys befsr41 1.38.5
linksys befsru31 1.40.2
linksys befsr41 1.39
linksys befsru31 1.43.3
linksys befsr11 1.41
linksys befsr81
linksys befsr41 1.37
linksys befsr41 1.43.3

source: wwwsecurityfocuscom/bid/10329/info It has been reported that the built-in DHCP server on these devices are prone to an information disclosure vulnerability When attempting to exploit this issue, it has been reported that a denial of service condition may occur, stopping legitimate users from using the device The DHCP server app ...

NVD-CWE-Other http://www.securityfocus.com/bid/10329 http://www.osvdb.org/6325 http://securitytracker.com/alerts/2004/May/1010288.html http://secunia.com/advisories/11606 http://marc.info/?l=bugtraq&m=108662876129301&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/16142 http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=https://nvd.nist.gov https://www.exploit-db.com/exploits/24115/

CVE-2004-0580

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect