medium5.0Public exploit code

CVE-2004-0580

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Linksys - DHCP Information Disclosure2004-05-31 · remote · hardware · Verified

Impact

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

Affected products

Vendor	Product	Affected versions
Linksys	Befcmu10	All versions
Linksys	Befn2ps4	All versions Version 1.42.7
Linksys	Befsr11	Versions 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3
Linksys	Befsr41	Versions 1.35, 1.36, 1.37, 1.38.5, 1.39, 1.40.2
Linksys	Befsr41w	All versions
Linksys	Befsr81	All versions Versions 2.42.7.1, 2.44
Linksys	Befsru31	Versions 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3
Linksys	Befsx41	Versions 1.42.7, 1.43, 1.43.3, 1.43.4, 1.44, 1.44.3
Linksys	Befvp41	All versions Versions 1.39.64, 1.40.3f, 1.40.4, 1.42.7
Linksys	Rv082	All versions
Linksys	Wap55ag	Version 1.0.7
Linksys	Wrt54g	Versions 1.42.3, 2.00.8

Public exploit code

Impact

Affected products

References