CVE-2002-1312: Buffer Overflow

Published Nov 20, 2002

Updated

Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware before 1.43.3 with remote management enabled allows remote attackers to cause a denial of service (router crash) via a long password.

Affected Software

13 affected components

LinkSys BEFSR81=2.42.7.1

LinkSys BEFVP41=1.42.7

LinkSys Hpro200=1.42.7

LinkSys BEFSR11=1.43

LinkSys BEFSRU31=1.43

LinkSys BEFSR41=1.42.7

LinkSys BEFW11S4=1.4.3

LinkSys BEFSX41=1.42.7

LinkSys BEFSR11=1.42.7

LinkSys BEFSRU31=1.42.7

LinkSys BEFSR41=1.43

LinkSys BEFW11S4=1.4.2.7

LinkSys BEFN2PS4=1.42.7

Remediation

Patch Available

http://www.securityfocus.com/bid/6208

Event History

Nov 20, 2002

CVE Published

05:00 AM

Apr 14, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1312?

CVE-2002-1312 is considered a high severity vulnerability due to its potential for remote exploitation and denial of service.

How do I fix CVE-2002-1312?

To fix CVE-2002-1312, upgrade the firmware of affected Linksys routers to version 1.43.3 or later.

Which devices are affected by CVE-2002-1312?

CVE-2002-1312 affects various Linksys routers including the BEFW11S4, BEFSR11, BEFSR41, and BEFSRU31 with specific firmware versions prior to 1.43.3.

What type of attack does CVE-2002-1312 facilitate?

CVE-2002-1312 allows remote attackers to exploit a buffer overflow, potentially leading to a denial-of-service condition.

Is remote management a factor in CVE-2002-1312?

Yes, CVE-2002-1312 is specifically relevant when remote management is enabled on the affected Linksys routers.